last executing test programs: 2m23.447825968s ago: executing program 3 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 2m23.304555244s ago: executing program 3 (id=547): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m23.214664921s ago: executing program 2 (id=548): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037e92208a1ce", 0x8, 0x40000, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 2m22.832487527s ago: executing program 2 (id=555): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffff7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000010000ac"], 0x28}}], 0x1, 0x0) 2m22.533170384s ago: executing program 2 (id=559): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) splice(r0, 0x0, r1, &(0x7f0000000000)=0x3ff, 0x100000000000002, 0xd) 2m22.414632874s ago: executing program 2 (id=560): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioperm(0x0, 0x2, 0xffffffffffff651d) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, 0x0, 0x0) 2m22.236270072s ago: executing program 2 (id=563): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r0, 0x0, 0xd8) 2m22.134303468s ago: executing program 4 (id=564): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002540)={@multicast1, @remote}, 0xc) 2m22.104984448s ago: executing program 2 (id=565): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000005140)='./file1\x00', 0x0, &(0x7f0000000040)={[{@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@ref_verify}, {@nodatasum}, {@autodefrag}, {@notreelog}]}, 0x1, 0x50ed, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000440)="c3", 0x1, 0xfece) 2m22.076192551s ago: executing program 1 (id=566): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) 2m21.891171781s ago: executing program 5 (id=567): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x8) 2m21.817690531s ago: executing program 4 (id=568): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000180)={[{@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'macturkish'}}, {@barrier}, {@force}, {@gid}, {}]}, 0x3, 0x6ae, &(0x7f0000000e40)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 2m21.799775129s ago: executing program 1 (id=569): mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2m21.734855816s ago: executing program 0 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2m21.584834679s ago: executing program 1 (id=571): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfe35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) 2m21.490609326s ago: executing program 0 (id=572): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}, {&(0x7f0000000040)='\x00', 0x1}], 0x2, 0x14, 0x0) 2m21.455639531s ago: executing program 4 (id=573): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x2, r0, 0x36866356, 0x0) 2m21.417022651s ago: executing program 5 (id=574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m21.339761474s ago: executing program 1 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m21.337382196s ago: executing program 3 (id=576): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) 2m21.266550438s ago: executing program 0 (id=577): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8) 2m21.163459047s ago: executing program 1 (id=578): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001200)=ANY=[@ANYBLOB='iocharset=koi8-r,noadinicb,lastblock=00000000000000000034,uid=forget,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c756e64656c6574652c756d61736b3d30303030303030303030303030303030303030303031312c756e686964652c00440c75c891c097786cb179aaf2bf042c54664b24e89e417b353c3e629ff7f5ae9f04e3333fbe6fb128047138060364a8e168332a941e5159ebad4544f81b91efadcd590ae07f01346c3249361dc9a7caa2d0cb9a50119639a16045c0fb4c59067ab0dfa5b5eb31f5663bc936e0d20d98022eca16bf9032a65281ecd3b2aa00"/196], 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40603d10, &(0x7f0000000200)) 2m21.040459617s ago: executing program 3 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d616300050001000700000014000780"], 0x5c}}, 0x0) 2m21.024859698s ago: executing program 0 (id=580): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) getpeername$packet(r0, 0x0, 0x0) 2m20.990867139s ago: executing program 5 (id=581): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000014c0)={r1}) 2m20.970830081s ago: executing program 4 (id=582): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003740)=ANY=[@ANYBLOB="e0000000110001"], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x84) 2m20.754081045s ago: executing program 0 (id=583): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x7, 0x400, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 2m20.729488778s ago: executing program 1 (id=584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000011c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2m20.713372549s ago: executing program 4 (id=585): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m20.657669359s ago: executing program 3 (id=586): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) 2m20.632336694s ago: executing program 5 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100040000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000c0e6090002"], 0x28}}, 0x0) 2m20.401719596s ago: executing program 4 (id=588): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) 2m20.401430769s ago: executing program 0 (id=589): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x100, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2m20.302194256s ago: executing program 5 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0x1, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) 2m20.282465055s ago: executing program 3 (id=591): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m19.99286502s ago: executing program 5 (id=592): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x1000, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 1m47.906710963s ago: executing program 32 (id=589): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x100, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 0s ago: executing program 33 (id=584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000011c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): d to keep mac addresses unique to avoid problems! [ 80.763959][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.776625][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.787057][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.798919][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.812139][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.835561][ T5842] veth0_macvtap: entered promiscuous mode [ 80.857443][ T5844] veth1_macvtap: entered promiscuous mode [ 80.870151][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.889765][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.901291][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.917679][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.920310][ T5952] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 80.929289][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.962090][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.974111][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.026496][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.055373][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079813][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.099076][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.111119][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.132370][ T5842] veth1_macvtap: entered promiscuous mode [ 81.138986][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.183281][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.209001][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.220366][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.238896][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.257679][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.268545][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.292311][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.319045][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.350021][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.458278][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.483153][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.495515][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.512963][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.526877][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.538574][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.548912][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.559954][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.570458][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.595246][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.616977][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.652024][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.678066][ T5849] Bluetooth: hci2: command tx timeout [ 81.683778][ T5853] Bluetooth: hci1: command tx timeout [ 81.702798][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.721791][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.752267][ T5849] Bluetooth: hci5: command tx timeout [ 81.757744][ T5849] Bluetooth: hci4: command tx timeout [ 81.763270][ T5853] Bluetooth: hci0: command tx timeout [ 81.768700][ T5853] Bluetooth: hci3: command tx timeout [ 81.871870][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.881839][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.892448][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.902413][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.913196][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.923749][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.934244][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.945784][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.956254][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.974128][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.002717][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.029611][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.057256][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.069139][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.080112][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.091727][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.101632][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.112131][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.122439][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.132959][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.142858][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.155248][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.167464][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.190543][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.200155][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.210555][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.221750][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.230501][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.239959][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.343473][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.367432][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.518659][ T5974] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 82.522296][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.578206][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.578539][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.609099][ T5974] bond0: (slave team0): Enslaving as an active interface with an up link [ 82.640973][ T5975] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 82.655083][ T5975] bond0: (slave team0): Releasing backup interface [ 82.686467][ T5975] bridge0: port 3(team0) entered blocking state [ 82.696453][ T5977] loop1: detected capacity change from 0 to 1024 [ 82.714571][ T5977] hfsplus: uid requires an argument [ 82.720032][ T5977] hfsplus: unable to parse mount options [ 82.727470][ T5975] bridge0: port 3(team0) entered disabled state [ 82.745784][ T5975] team0: entered allmulticast mode [ 82.753291][ T5975] team_slave_0: entered allmulticast mode [ 82.771734][ T5975] team_slave_1: entered allmulticast mode [ 82.782532][ T5975] team0: entered promiscuous mode [ 82.796406][ T5975] team_slave_0: entered promiscuous mode [ 82.809060][ T5975] team_slave_1: entered promiscuous mode [ 82.896191][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.938419][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.079871][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.164254][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.313615][ T5986] loop2: detected capacity change from 0 to 1024 [ 83.348303][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.358762][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.370010][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.403855][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.785435][ T5988] loop3: detected capacity change from 0 to 32768 [ 83.793130][ T5988] ======================================================= [ 83.793130][ T5988] WARNING: The mand mount option has been deprecated and [ 83.793130][ T5988] and is ignored by this kernel. Remove the mand [ 83.793130][ T5988] option from the mount to silence this warning. [ 83.793130][ T5988] ======================================================= [ 83.906775][ T5988] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.18 (5988) [ 84.408126][ T5993] loop0: detected capacity change from 0 to 40427 [ 84.424958][ T5993] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 84.432993][ T5993] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 84.446147][ T5993] F2FS-fs (loop0): invalid crc value [ 84.447557][ T5988] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 84.457162][ T5993] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.489265][ T6002] loop2: detected capacity change from 0 to 128 [ 84.591680][ T5988] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 84.650288][ T6002] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.673634][ T5988] BTRFS info (device loop3): using free-space-tree [ 84.684835][ T6002] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.857852][ T5993] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.865760][ T5993] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.069286][ T5971] syz.4.13 (5971): drop_caches: 2 [ 85.137449][ T5988] BTRFS info (device loop3): checking UUID tree [ 85.149231][ T5839] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.646158][ T5996] loop5: detected capacity change from 0 to 32768 [ 85.851113][ T5996] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 85.899181][ T5838] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 85.918523][ T6046] loop1: detected capacity change from 0 to 1024 [ 86.174398][ T6057] loop4: detected capacity change from 0 to 64 [ 86.267476][ T6060] Zero length message leads to an empty skb [ 86.381075][ T29] audit: type=1800 audit(1730928936.275:2): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.33" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 86.429141][ T25] cfg80211: failed to load regulatory.db [ 86.463009][ T5996] XFS (loop5): Ending clean mount [ 86.508816][ T5996] XFS (loop5): Quotacheck needed: Please wait. [ 86.639527][ T5996] XFS (loop5): Quotacheck: Done. [ 86.943117][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.959590][ T5844] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 86.966298][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.298855][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.306146][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.361081][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.368344][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.464606][ T6083] loop3: detected capacity change from 0 to 512 [ 87.538159][ T6083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.576692][ T6083] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.579633][ T6077] tipc: Started in network mode [ 87.660529][ T6067] syz.0.39 (6067): drop_caches: 2 [ 87.665039][ T6077] tipc: Node identity ffffffff, cluster identity 4711 [ 87.683662][ T6077] tipc: Node number set to 4294967295 [ 87.825533][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.366821][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 88.605888][ T6114] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.688027][ T6104] loop0: detected capacity change from 0 to 32768 [ 88.817576][ T6104] JBD2: Ignoring recovery information on journal [ 88.949119][ T6104] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.974852][ T963] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.984335][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.995580][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.003710][ T6109] loop2: detected capacity change from 0 to 8192 [ 89.015541][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.076665][ T5906] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 89.098401][ T6109] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 89.105944][ T6109] loop2: p2 start 4294967295 is beyond EOD, [ 89.108884][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.265603][ T6121] loop4: detected capacity change from 0 to 256 [ 89.279268][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 89.287485][ T963] usb 4-1: Using ep0 maxpacket: 16 [ 89.317682][ T963] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 89.332805][ T6109] truncated [ 89.335994][ T6109] loop2: p4 size 16776960 extends beyond EOD, truncated [ 89.353566][ T6109] loop2: p5 start 4294967295 is beyond EOD, truncated [ 89.361758][ T963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.367095][ T6109] loop2: p6 start 4294967295 is beyond EOD, truncated [ 89.395609][ T963] usb 4-1: Product: syz [ 89.399849][ T963] usb 4-1: Manufacturer: syz [ 89.404282][ T5906] usb 6-1: config 0 descriptor?? [ 89.434048][ T6109] loop2: p7 start 4294967295 is beyond EOD, truncated [ 89.440936][ T6109] loop2: p8 start 4294967295 is beyond EOD, truncated [ 89.450340][ T963] usb 4-1: SerialNumber: syz [ 89.460153][ T6121] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xd3fc6e3e, utbl_chksum : 0xe619d30d) [ 89.482748][ T963] usb 4-1: config 0 descriptor?? [ 89.505115][ T6109] loop2: p9 start 4294967295 is beyond EOD, truncated [ 89.513260][ T6121] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 89.532435][ T963] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 89.542983][ T6109] loop2: p10 start 4294967295 is beyond EOD, truncated [ 89.549956][ T6109] loop2: p11 start 4294967295 is beyond EOD, truncated [ 89.585840][ T6109] loop2: p12 start 4294967295 is beyond EOD, truncated [ 89.604805][ T6109] loop2: p13 start 4294967295 is beyond EOD, truncated [ 89.632751][ T6109] loop2: p14 start 4294967295 is beyond EOD, truncated [ 89.648933][ T6109] loop2: p15 start 4294967295 is beyond EOD, truncated [ 89.666553][ T6109] loop2: p16 start 4294967295 is beyond EOD, truncated [ 89.687337][ T6109] loop2: p17 start 4294967295 is beyond EOD, truncated [ 89.741625][ T6109] loop2: p18 start 4294967295 is beyond EOD, truncated [ 89.761151][ T6109] loop2: p19 start 4294967295 is beyond EOD, truncated [ 89.801010][ T6109] loop2: p20 start 4294967295 is beyond EOD, truncated [ 89.839348][ T5906] elecom 0003:056E:010C.0001: unknown main item tag 0x1 [ 89.862736][ T6109] loop2: p21 start 4294967295 is beyond EOD, truncated [ 89.869678][ T6109] loop2: p22 start 4294967295 is beyond EOD, truncated [ 89.907769][ T5906] elecom 0003:056E:010C.0001: item fetching failed at offset 24/41 [ 89.935266][ T5906] elecom 0003:056E:010C.0001: probe with driver elecom failed with error -22 [ 89.948908][ T6109] loop2: p23 start 4294967295 is beyond EOD, truncated [ 89.988494][ T6109] loop2: p24 start 4294967295 is beyond EOD, truncated [ 90.012204][ T963] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 90.018030][ T6109] loop2: p25 start 4294967295 is beyond EOD, [ 90.021470][ T963] visor 4-1:0.0: probe with driver visor failed with error -5 [ 90.029079][ T6109] truncated [ 90.069598][ T6109] loop2: p26 start 4294967295 is beyond EOD, truncated [ 90.116461][ T6109] loop2: p27 start 4294967295 is beyond EOD, truncated [ 90.156362][ T6109] loop2: p28 start 4294967295 is beyond EOD, truncated [ 90.199493][ T6109] loop2: p29 start 4294967295 is beyond EOD, truncated [ 90.238306][ T5906] usb 6-1: USB disconnect, device number 2 [ 90.244786][ T6109] loop2: p30 start 4294967295 is beyond EOD, truncated [ 90.302753][ T6109] loop2: p31 start 4294967295 is beyond EOD, truncated [ 90.321641][ T6109] loop2: p32 start 4294967295 is beyond EOD, truncated [ 90.329438][ T6109] loop2: p33 start 4294967295 is beyond EOD, truncated [ 90.351536][ T5846] usb 4-1: USB disconnect, device number 2 [ 90.363241][ T6109] loop2: p34 start 4294967295 is beyond EOD, truncated [ 90.370179][ T6109] loop2: p35 start 4294967295 is beyond EOD, truncated [ 90.383772][ T6109] loop2: p36 start 4294967295 is beyond EOD, truncated [ 90.394232][ T6109] loop2: p37 start 4294967295 is beyond EOD, truncated [ 90.401168][ T6109] loop2: p38 start 4294967295 is beyond EOD, truncated [ 90.422283][ T6109] loop2: p39 start 4294967295 is beyond EOD, truncated [ 90.429398][ T6109] loop2: p40 start 4294967295 is beyond EOD, truncated [ 90.436419][ T6109] loop2: p41 start 4294967295 is beyond EOD, truncated [ 90.452381][ T6109] loop2: p42 start 4294967295 is beyond EOD, truncated [ 90.463249][ T6109] loop2: p43 start 4294967295 is beyond EOD, truncated [ 90.484975][ T6109] loop2: p44 start 4294967295 is beyond EOD, truncated [ 90.516647][ T6109] loop2: p45 start 4294967295 is beyond EOD, truncated [ 90.561911][ T6109] loop2: p46 start 4294967295 is beyond EOD, truncated [ 90.603168][ T6109] loop2: p47 start 4294967295 is beyond EOD, truncated [ 90.610112][ T6109] loop2: p48 start 4294967295 is beyond EOD, truncated [ 90.671999][ T6109] loop2: p49 start 4294967295 is beyond EOD, truncated [ 90.679036][ T6109] loop2: p50 start 4294967295 is beyond EOD, truncated [ 90.704291][ T6132] loop1: detected capacity change from 0 to 32768 [ 90.711714][ T6132] XFS: ikeep mount option is deprecated. [ 90.734756][ T6109] loop2: p51 start 4294967295 is beyond EOD, truncated [ 90.752545][ T6109] loop2: p52 start 4294967295 is beyond EOD, truncated [ 90.787088][ T6109] loop2: p53 start 4294967295 is beyond EOD, truncated [ 90.806458][ T6109] loop2: p54 start 4294967295 is beyond EOD, truncated [ 90.813888][ T6109] loop2: p55 start 4294967295 is beyond EOD, truncated [ 90.822068][ T6109] loop2: p56 start 4294967295 is beyond EOD, truncated [ 90.829223][ T6109] loop2: p57 start 4294967295 is beyond EOD, truncated [ 90.839382][ T6109] loop2: p58 start 4294967295 is beyond EOD, truncated [ 90.848683][ T6109] loop2: p59 start 4294967295 is beyond EOD, truncated [ 90.855936][ T6109] loop2: p60 start 4294967295 is beyond EOD, truncated [ 90.862947][ T6109] loop2: p61 start 4294967295 is beyond EOD, truncated [ 90.870006][ T6109] loop2: p62 start 4294967295 is beyond EOD, truncated [ 90.898004][ T6132] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.917315][ T6109] loop2: p63 start 4294967295 is beyond EOD, truncated [ 90.930218][ T6109] loop2: p64 start 4294967295 is beyond EOD, truncated [ 90.941183][ T6109] loop2: p65 start 4294967295 is beyond EOD, truncated [ 90.952183][ T6109] loop2: p66 start 4294967295 is beyond EOD, truncated [ 90.959606][ T6109] loop2: p67 start 4294967295 is beyond EOD, truncated [ 90.982916][ T6109] loop2: p68 start 4294967295 is beyond EOD, truncated [ 90.989887][ T6109] loop2: p69 start 4294967295 is beyond EOD, truncated [ 90.998086][ T6109] loop2: p70 start 4294967295 is beyond EOD, truncated [ 91.005973][ T6109] loop2: p71 start 4294967295 is beyond EOD, truncated [ 91.014443][ T6109] loop2: p72 start 4294967295 is beyond EOD, truncated [ 91.021899][ T6109] loop2: p73 start 4294967295 is beyond EOD, truncated [ 91.035270][ T6109] loop2: p74 start 4294967295 is beyond EOD, truncated [ 91.099658][ T6109] loop2: p75 start 4294967295 is beyond EOD, truncated [ 91.113641][ T6132] XFS (loop1): Ending clean mount [ 91.125298][ T6132] XFS (loop1): Quotacheck needed: Please wait. [ 91.141692][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.145184][ T6109] loop2: p76 start 4294967295 is beyond EOD, truncated [ 91.187169][ T6109] loop2: p77 start 4294967295 is beyond EOD, truncated [ 91.207531][ T6109] loop2: p78 start 4294967295 is beyond EOD, truncated [ 91.251752][ T6109] loop2: p79 start 4294967295 is beyond EOD, truncated [ 91.258771][ T6109] loop2: p80 start 4294967295 is beyond EOD, truncated [ 91.286096][ T6109] loop2: p81 start 4294967295 is beyond EOD, truncated [ 91.311866][ T6132] XFS (loop1): Quotacheck: Done. [ 91.351439][ T6109] loop2: p82 start 4294967295 is beyond EOD, truncated [ 91.366151][ T6109] loop2: p83 start 4294967295 is beyond EOD, truncated [ 91.385148][ T6109] loop2: p84 start 4294967295 is beyond EOD, truncated [ 91.411748][ T6109] loop2: p85 start 4294967295 is beyond EOD, truncated [ 91.435007][ T5906] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 91.451309][ T5906] usb 1-1: config 0 has no interface number 0 [ 91.455301][ T6109] loop2: p86 start 4294967295 is beyond EOD, truncated [ 91.459264][ T5906] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.482981][ T5841] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.502838][ T6109] loop2: p87 start 4294967295 is beyond EOD, truncated [ 91.524852][ T6109] loop2: p88 start 4294967295 is beyond EOD, truncated [ 91.540907][ T6109] loop2: p89 start 4294967295 is beyond EOD, truncated [ 91.587589][ T5906] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.598806][ T6109] loop2: p90 start 4294967295 is beyond EOD, truncated [ 91.634965][ T6109] loop2: p91 start 4294967295 is beyond EOD, truncated [ 91.643481][ T6109] loop2: p92 start 4294967295 is beyond EOD, truncated [ 91.650299][ T5906] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.657018][ T6109] loop2: p93 start 4294967295 is beyond EOD, truncated [ 91.666825][ T6109] loop2: p94 start 4294967295 is beyond EOD, truncated [ 91.673918][ T6109] loop2: p95 start 4294967295 is beyond EOD, truncated [ 91.729978][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.787042][ T5906] usb 1-1: config 0 descriptor?? [ 91.808319][ T6180] sd 0:0:1:0: device reset [ 91.821837][ T6109] loop2: p96 start 4294967295 is beyond EOD, truncated [ 91.839327][ T6109] loop2: p97 start 4294967295 is beyond EOD, truncated [ 91.891082][ T6109] loop2: p98 start 4294967295 is beyond EOD, truncated [ 91.900500][ T6109] loop2: p99 start 4294967295 is beyond EOD, truncated [ 91.930246][ T6109] loop2: p100 start 4294967295 is beyond EOD, truncated [ 91.960842][ T6109] loop2: p101 start 4294967295 is beyond EOD, truncated [ 91.969328][ T6109] loop2: p102 start 4294967295 is beyond EOD, truncated [ 92.002613][ T6109] loop2: p103 start 4294967295 is beyond EOD, truncated [ 92.031857][ T6109] loop2: p104 start 4294967295 is beyond EOD, truncated [ 92.061628][ T6109] loop2: p105 start 4294967295 is beyond EOD, truncated [ 92.078769][ T6109] loop2: p106 start 4294967295 is beyond EOD, truncated [ 92.144216][ T6171] loop4: detected capacity change from 0 to 32768 [ 92.148268][ T6109] loop2: p107 start 4294967295 is beyond EOD, truncated [ 92.202039][ T6109] loop2: p108 start 4294967295 is beyond EOD, truncated [ 92.220526][ T5906] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 92.228992][ T6109] loop2: p109 start 4294967295 is beyond EOD, truncated [ 92.231258][ T6171] JBD2: Ignoring recovery information on journal [ 92.248172][ T6109] loop2: p110 start 4294967295 is beyond EOD, truncated [ 92.264151][ T6109] loop2: p111 start 4294967295 is beyond EOD, truncated [ 92.275535][ T6109] loop2: p112 start 4294967295 is beyond EOD, truncated [ 92.305896][ T6109] loop2: p113 start 4294967295 is beyond EOD, truncated [ 92.310626][ T6184] loop3: detected capacity change from 0 to 4096 [ 92.320784][ T6109] loop2: p114 start 4294967295 is beyond EOD, truncated [ 92.338118][ T6109] loop2: p115 start 4294967295 is beyond EOD, truncated [ 92.350155][ T6109] loop2: p116 start 4294967295 is beyond EOD, truncated [ 92.372287][ T6109] loop2: p117 start 4294967295 is beyond EOD, truncated [ 92.412046][ T6184] NILFS (loop3): invalid segment: Checksum error in segment payload [ 92.441025][ T6109] loop2: p118 start 4294967295 is beyond EOD, truncated [ 92.454858][ T6184] NILFS (loop3): trying rollback from an earlier position [ 92.485287][ T5906] usb 1-1: USB disconnect, device number 2 [ 92.495103][ T6109] loop2: p119 start 4294967295 is beyond EOD, truncated [ 92.523899][ T6109] loop2: p120 start 4294967295 is beyond EOD, truncated [ 92.575835][ T6109] loop2: p121 start 4294967295 is beyond EOD, truncated [ 92.585247][ T6184] NILFS (loop3): recovery complete [ 92.611014][ T6109] loop2: p122 start 4294967295 is beyond EOD, truncated [ 92.633815][ T6196] netlink: zone id is out of range [ 92.642254][ T6109] loop2: p123 start 4294967295 is beyond EOD, truncated [ 92.651592][ T6197] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.671855][ T6196] netlink: zone id is out of range [ 92.677434][ T6109] loop2: p124 start 4294967295 is beyond EOD, truncated [ 92.685875][ T6171] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.697700][ T6109] loop2: p125 start 4294967295 is beyond EOD, truncated [ 92.707604][ T6196] netlink: set zone limit has 4 unknown bytes [ 92.713643][ T6109] loop2: p126 start 4294967295 is beyond EOD, truncated [ 92.790487][ T6109] loop2: p127 start 4294967295 is beyond EOD, truncated [ 92.852060][ T29] audit: type=1800 audit(1730928942.775:3): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.76" name="file1" dev="loop4" ino=16946 res=0 errno=0 [ 92.861284][ T6188] loop1: detected capacity change from 0 to 32768 [ 92.876127][ T6109] loop2: p128 start 4294967295 is beyond EOD, truncated [ 92.904170][ T6109] loop2: p129 start 4294967295 is beyond EOD, truncated [ 92.918498][ T6188] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.938663][ T6109] loop2: p130 start 4294967295 is beyond EOD, truncated [ 92.946488][ T6109] loop2: p131 start 4294967295 is beyond EOD, truncated [ 92.955107][ T6109] loop2: p132 start 4294967295 is beyond EOD, truncated [ 92.962619][ T6109] loop2: p133 start 4294967295 is beyond EOD, truncated [ 92.970759][ T6109] loop2: p134 start 4294967295 is beyond EOD, truncated [ 92.978280][ T6109] loop2: p135 start 4294967295 is beyond EOD, truncated [ 92.985695][ T6109] loop2: p136 start 4294967295 is beyond EOD, truncated [ 92.992978][ T6109] loop2: p137 start 4294967295 is beyond EOD, truncated [ 93.000064][ T6109] loop2: p138 start 4294967295 is beyond EOD, truncated [ 93.030111][ T6188] XFS (loop1): Ending clean mount [ 93.034195][ T6109] loop2: p139 start 4294967295 is beyond EOD, truncated [ 93.061498][ T6109] loop2: p140 start 4294967295 is beyond EOD, truncated [ 93.068740][ T6109] loop2: p141 start 4294967295 is beyond EOD, truncated [ 93.141880][ T6109] loop2: p142 start 4294967295 is beyond EOD, truncated [ 93.154014][ T5840] ocfs2: Unmounting device (7,4) on (node local) [ 93.191421][ T6109] loop2: p143 start 4294967295 is beyond EOD, truncated [ 93.198453][ T6109] loop2: p144 start 4294967295 is beyond EOD, truncated [ 93.230767][ T5841] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.243218][ T6109] loop2: p145 start 4294967295 is beyond EOD, truncated [ 93.250951][ T6109] loop2: p146 start 4294967295 is beyond EOD, truncated [ 93.259123][ T6109] loop2: p147 start 4294967295 is beyond EOD, truncated [ 93.266762][ T6109] loop2: p148 start 4294967295 is beyond EOD, truncated [ 93.284217][ T6109] loop2: p149 start 4294967295 is beyond EOD, truncated [ 93.323953][ T6109] loop2: p150 start 4294967295 is beyond EOD, truncated [ 93.330979][ T6109] loop2: p151 start 4294967295 is beyond EOD, truncated [ 93.338629][ T6109] loop2: p152 start 4294967295 is beyond EOD, truncated [ 93.346216][ T6109] loop2: p153 start 4294967295 is beyond EOD, truncated [ 93.353799][ T6109] loop2: p154 start 4294967295 is beyond EOD, truncated [ 93.360778][ T6109] loop2: p155 start 4294967295 is beyond EOD, truncated [ 93.368235][ T6109] loop2: p156 start 4294967295 is beyond EOD, truncated [ 93.375543][ T6109] loop2: p157 start 4294967295 is beyond EOD, truncated [ 93.384035][ T6109] loop2: p158 start 4294967295 is beyond EOD, truncated [ 93.391016][ T6109] loop2: p159 start 4294967295 is beyond EOD, truncated [ 93.458261][ T6109] loop2: p160 start 4294967295 is beyond EOD, truncated [ 93.466392][ T6109] loop2: p161 start 4294967295 is beyond EOD, truncated [ 93.473846][ T6109] loop2: p162 start 4294967295 is beyond EOD, truncated [ 93.480838][ T6109] loop2: p163 start 4294967295 is beyond EOD, truncated [ 93.488695][ T6109] loop2: p164 start 4294967295 is beyond EOD, truncated [ 93.497036][ T6109] loop2: p165 start 4294967295 is beyond EOD, truncated [ 93.516993][ T963] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 93.524676][ T6109] loop2: p166 start 4294967295 is beyond EOD, truncated [ 93.531979][ T6109] loop2: p167 start 4294967295 is beyond EOD, truncated [ 93.539059][ T6109] loop2: p168 start 4294967295 is beyond EOD, truncated [ 93.546202][ T6109] loop2: p169 start 4294967295 is beyond EOD, truncated [ 93.553699][ T6109] loop2: p170 start 4294967295 is beyond EOD, truncated [ 93.560971][ T6109] loop2: p171 start 4294967295 is beyond EOD, truncated [ 93.568553][ T6109] loop2: p172 start 4294967295 is beyond EOD, truncated [ 93.575864][ T6109] loop2: p173 start 4294967295 is beyond EOD, truncated [ 93.583044][ T6109] loop2: p174 start 4294967295 is beyond EOD, truncated [ 93.591198][ T6109] loop2: p175 start 4294967295 is beyond EOD, truncated [ 93.596832][ T6210] loop0: detected capacity change from 0 to 4096 [ 93.598407][ T6109] loop2: p176 start 4294967295 is beyond EOD, truncated [ 93.611807][ T6109] loop2: p177 start 4294967295 is beyond EOD, truncated [ 93.618796][ T6109] loop2: p178 start 4294967295 is beyond EOD, truncated [ 93.625958][ T6109] loop2: p179 start 4294967295 is beyond EOD, truncated [ 93.633262][ T6109] loop2: p180 start 4294967295 is beyond EOD, truncated [ 93.640519][ T6109] loop2: p181 start 4294967295 is beyond EOD, truncated [ 93.647564][ T6109] loop2: p182 start 4294967295 is beyond EOD, truncated [ 93.654649][ T6109] loop2: p183 start 4294967295 is beyond EOD, truncated [ 93.661715][ T6109] loop2: p184 start 4294967295 is beyond EOD, truncated [ 93.668687][ T6109] loop2: p185 start 4294967295 is beyond EOD, truncated [ 93.676157][ T6109] loop2: p186 start 4294967295 is beyond EOD, truncated [ 93.683538][ T6109] loop2: p187 start 4294967295 is beyond EOD, truncated [ 93.691820][ T6109] loop2: p188 start 4294967295 is beyond EOD, truncated [ 93.698791][ T6109] loop2: p189 start 4294967295 is beyond EOD, truncated [ 93.705932][ T6109] loop2: p190 start 4294967295 is beyond EOD, truncated [ 93.712988][ T6109] loop2: p191 start 4294967295 is beyond EOD, truncated [ 93.714798][ T6210] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 93.719939][ T6109] loop2: p192 start 4294967295 is beyond EOD, truncated [ 93.719970][ T6109] loop2: p193 start 4294967295 is beyond EOD, truncated [ 93.719998][ T6109] loop2: p194 start 4294967295 is beyond EOD, truncated [ 93.750331][ T6109] loop2: p195 start 4294967295 is beyond EOD, truncated [ 93.757593][ T6109] loop2: p196 start 4294967295 is beyond EOD, truncated [ 93.764640][ T6109] loop2: p197 start 4294967295 is beyond EOD, truncated [ 93.771706][ T6109] loop2: p198 start 4294967295 is beyond EOD, truncated [ 93.778713][ T6109] loop2: p199 start 4294967295 is beyond EOD, truncated [ 93.785792][ T6109] loop2: p200 start 4294967295 is beyond EOD, truncated [ 93.793383][ T6109] loop2: p201 start 4294967295 is beyond EOD, truncated [ 93.800354][ T6109] loop2: p202 start 4294967295 is beyond EOD, truncated [ 93.808059][ T6109] loop2: p203 start 4294967295 is beyond EOD, truncated [ 93.815122][ T6109] loop2: p204 start 4294967295 is beyond EOD, truncated [ 93.822192][ T6109] loop2: p205 start 4294967295 is beyond EOD, truncated [ 93.829203][ T6109] loop2: p206 start 4294967295 is beyond EOD, truncated [ 93.836453][ T6109] loop2: p207 start 4294967295 is beyond EOD, truncated [ 93.843585][ T6109] loop2: p208 start 4294967295 is beyond EOD, truncated [ 93.850561][ T6109] loop2: p209 start 4294967295 is beyond EOD, truncated [ 93.857730][ T6109] loop2: p210 start 4294967295 is beyond EOD, truncated [ 93.864798][ T6109] loop2: p211 start 4294967295 is beyond EOD, truncated [ 93.871887][ T6109] loop2: p212 start 4294967295 is beyond EOD, truncated [ 93.878900][ T6109] loop2: p213 start 4294967295 is beyond EOD, truncated [ 93.885938][ T6109] loop2: p214 start 4294967295 is beyond EOD, truncated [ 93.894690][ T6109] loop2: p215 start 4294967295 is beyond EOD, truncated [ 93.902387][ T6109] loop2: p216 start 4294967295 is beyond EOD, truncated [ 93.909408][ T6109] loop2: p217 start 4294967295 is beyond EOD, truncated [ 93.916549][ T6109] loop2: p218 start 4294967295 is beyond EOD, truncated [ 93.923658][ T6109] loop2: p219 start 4294967295 is beyond EOD, truncated [ 93.930633][ T6109] loop2: p220 start 4294967295 is beyond EOD, truncated [ 93.937720][ T6109] loop2: p221 start 4294967295 is beyond EOD, truncated [ 93.944880][ T6109] loop2: p222 start 4294967295 is beyond EOD, truncated [ 93.952026][ T6109] loop2: p223 start 4294967295 is beyond EOD, truncated [ 93.959079][ T6109] loop2: p224 start 4294967295 is beyond EOD, truncated [ 93.966216][ T6109] loop2: p225 start 4294967295 is beyond EOD, truncated [ 93.973349][ T6109] loop2: p226 start 4294967295 is beyond EOD, truncated [ 93.980319][ T6109] loop2: p227 start 4294967295 is beyond EOD, truncated [ 93.987386][ T6109] loop2: p228 start 4294967295 is beyond EOD, truncated [ 93.995318][ T6109] loop2: p229 start 4294967295 is beyond EOD, truncated [ 94.003067][ T6109] loop2: p230 start 4294967295 is beyond EOD, truncated [ 94.010110][ T6109] loop2: p231 start 4294967295 is beyond EOD, truncated [ 94.017220][ T6109] loop2: p232 start 4294967295 is beyond EOD, truncated [ 94.024289][ T6109] loop2: p233 start 4294967295 is beyond EOD, truncated [ 94.031269][ T6109] loop2: p234 start 4294967295 is beyond EOD, truncated [ 94.038580][ T6109] loop2: p235 start 4294967295 is beyond EOD, truncated [ 94.045708][ T6109] loop2: p236 start 4294967295 is beyond EOD, truncated [ 94.052823][ T6109] loop2: p237 start 4294967295 is beyond EOD, truncated [ 94.059843][ T6109] loop2: p238 start 4294967295 is beyond EOD, truncated [ 94.066938][ T6109] loop2: p239 start 4294967295 is beyond EOD, truncated [ 94.074769][ T6109] loop2: p240 start 4294967295 is beyond EOD, truncated [ 94.082035][ T6109] loop2: p241 start 4294967295 is beyond EOD, truncated [ 94.089020][ T6109] loop2: p242 start 4294967295 is beyond EOD, truncated [ 94.096807][ T6109] loop2: p243 start 4294967295 is beyond EOD, truncated [ 94.104538][ T6109] loop2: p244 start 4294967295 is beyond EOD, truncated [ 94.111668][ T6109] loop2: p245 start 4294967295 is beyond EOD, truncated [ 94.118642][ T6109] loop2: p246 start 4294967295 is beyond EOD, truncated [ 94.125764][ T6109] loop2: p247 start 4294967295 is beyond EOD, truncated [ 94.132829][ T6109] loop2: p248 start 4294967295 is beyond EOD, truncated [ 94.139806][ T6109] loop2: p249 start 4294967295 is beyond EOD, truncated [ 94.148113][ T6109] loop2: p250 start 4294967295 is beyond EOD, truncated [ 94.155223][ T6109] loop2: p251 start 4294967295 is beyond EOD, truncated [ 94.162328][ T6109] loop2: p252 start 4294967295 is beyond EOD, truncated [ 94.169307][ T6109] loop2: p253 start 4294967295 is beyond EOD, truncated [ 94.176415][ T6109] loop2: p254 start 4294967295 is beyond EOD, truncated [ 94.183507][ T6109] loop2: p255 start 4294967295 is beyond EOD, truncated [ 94.254492][ T5208] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 94.270446][ T5208] loop2: p2 start 4294967295 is beyond EOD, [ 94.374399][ T963] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 94.385043][ T5208] truncated [ 94.411297][ T963] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 94.416264][ T5208] loop2: p4 size 16776960 extends beyond EOD, truncated [ 94.453684][ T963] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 94.463449][ T5208] loop2: p5 start 4294967295 is beyond EOD, truncated [ 94.491497][ T5208] loop2: p6 start 4294967295 is beyond EOD, truncated [ 94.501586][ T963] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 94.511393][ T5208] loop2: p7 start 4294967295 is beyond EOD, truncated [ 94.547503][ T5208] loop2: p8 start 4294967295 is beyond EOD, truncated [ 94.556661][ T963] usb 6-1: config 0 interface 0 has no altsetting 0 [ 94.564829][ T5208] loop2: p9 start 4294967295 is beyond EOD, truncated [ 94.591548][ T5208] loop2: p10 start 4294967295 is beyond EOD, truncated [ 94.604714][ T963] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 94.621448][ T963] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 94.629840][ T5208] loop2: p11 start 4294967295 is beyond EOD, truncated [ 94.629955][ T963] usb 6-1: Product: syz [ 94.653350][ T5208] loop2: p12 start 4294967295 is beyond EOD, truncated [ 94.681121][ T963] usb 6-1: Manufacturer: syz [ 94.686397][ T963] usb 6-1: SerialNumber: syz [ 94.691281][ T5208] loop2: p13 start 4294967295 is beyond EOD, truncated [ 94.698323][ T5208] loop2: p14 start 4294967295 is beyond EOD, truncated [ 94.722804][ T963] usb 6-1: config 0 descriptor?? [ 94.747275][ T5208] loop2: p15 start 4294967295 is beyond EOD, truncated [ 94.750979][ T963] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 94.771408][ T5208] loop2: p16 start 4294967295 is beyond EOD, truncated [ 94.801454][ T5208] loop2: p17 start 4294967295 is beyond EOD, truncated [ 94.804108][ T963] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.808399][ T5208] loop2: p18 start 4294967295 is beyond EOD, truncated [ 94.808434][ T5208] loop2: p19 start 4294967295 is beyond EOD, truncated [ 94.808458][ T5208] loop2: p20 start 4294967295 is beyond EOD, truncated [ 94.808485][ T5208] loop2: p21 start 4294967295 is beyond EOD, [ 94.844029][ T6211] loop3: detected capacity change from 0 to 32768 [ 94.895329][ T5208] truncated [ 94.898580][ T5208] loop2: p22 start 4294967295 is beyond EOD, truncated [ 94.913918][ T5208] loop2: p23 start 4294967295 is beyond EOD, truncated [ 94.924712][ T5208] loop2: p24 start 4294967295 is beyond EOD, truncated [ 94.932146][ T5208] loop2: p25 start 4294967295 is beyond EOD, truncated [ 94.939177][ T5208] loop2: p26 start 4294967295 is beyond EOD, truncated [ 94.946891][ T5208] loop2: p27 start 4294967295 is beyond EOD, truncated [ 94.954250][ T5208] loop2: p28 start 4294967295 is beyond EOD, truncated [ 94.961292][ T5208] loop2: p29 start 4294967295 is beyond EOD, truncated [ 94.968593][ T5208] loop2: p30 start 4294967295 is beyond EOD, truncated [ 94.976067][ T6211] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 94.977484][ T5208] loop2: p31 start 4294967295 is beyond EOD, truncated [ 94.988674][ T5910] usb 6-1: USB disconnect, device number 3 [ 94.992759][ T5208] loop2: p32 start 4294967295 is beyond EOD, truncated [ 95.002787][ T5910] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 95.005588][ T5208] loop2: p33 start 4294967295 is beyond EOD, truncated [ 95.020322][ T5208] loop2: p34 start 4294967295 is beyond EOD, truncated [ 95.027399][ T5208] loop2: p35 start 4294967295 is beyond EOD, truncated [ 95.034735][ T5208] loop2: p36 start 4294967295 is beyond EOD, truncated [ 95.041747][ T5208] loop2: p37 start 4294967295 is beyond EOD, truncated [ 95.048954][ T5208] loop2: p38 start 4294967295 is beyond EOD, truncated [ 95.056116][ T5208] loop2: p39 start 4294967295 is beyond EOD, truncated [ 95.063369][ T5208] loop2: p40 start 4294967295 is beyond EOD, truncated [ 95.070673][ T5208] loop2: p41 start 4294967295 is beyond EOD, truncated [ 95.079954][ T5208] loop2: p42 start 4294967295 is beyond EOD, truncated [ 95.141512][ T5208] loop2: p43 start 4294967295 is beyond EOD, truncated [ 95.170412][ T5208] loop2: p44 start 4294967295 is beyond EOD, truncated [ 95.181454][ T5208] loop2: p45 start 4294967295 is beyond EOD, truncated [ 95.188472][ T5208] loop2: p46 start 4294967295 is beyond EOD, truncated [ 95.195536][ T5208] loop2: p47 start 4294967295 is beyond EOD, truncated [ 95.202607][ T5208] loop2: p48 start 4294967295 is beyond EOD, truncated [ 95.209507][ T5208] loop2: p49 start 4294967295 is beyond EOD, truncated [ 95.216479][ T5208] loop2: p50 start 4294967295 is beyond EOD, truncated [ 95.224034][ T5208] loop2: p51 start 4294967295 is beyond EOD, truncated [ 95.230918][ T5208] loop2: p52 start 4294967295 is beyond EOD, truncated [ 95.238529][ T5208] loop2: p53 start 4294967295 is beyond EOD, truncated [ 95.245551][ T5208] loop2: p54 start 4294967295 is beyond EOD, truncated [ 95.252538][ T5208] loop2: p55 start 4294967295 is beyond EOD, truncated [ 95.259431][ T5208] loop2: p56 start 4294967295 is beyond EOD, truncated [ 95.266639][ T5208] loop2: p57 start 4294967295 is beyond EOD, truncated [ 95.273722][ T5208] loop2: p58 start 4294967295 is beyond EOD, truncated [ 95.280610][ T5208] loop2: p59 start 4294967295 is beyond EOD, truncated [ 95.287775][ T5208] loop2: p60 start 4294967295 is beyond EOD, truncated [ 95.294817][ T5208] loop2: p61 start 4294967295 is beyond EOD, truncated [ 95.301758][ T5208] loop2: p62 start 4294967295 is beyond EOD, truncated [ 95.308640][ T5208] loop2: p63 start 4294967295 is beyond EOD, truncated [ 95.315780][ T5208] loop2: p64 start 4294967295 is beyond EOD, truncated [ 95.322849][ T5208] loop2: p65 start 4294967295 is beyond EOD, truncated [ 95.331120][ T5208] loop2: p66 start 4294967295 is beyond EOD, truncated [ 95.338130][ T5208] loop2: p67 start 4294967295 is beyond EOD, truncated [ 95.345083][ T5208] loop2: p68 start 4294967295 is beyond EOD, truncated [ 95.352746][ T5208] loop2: p69 start 4294967295 is beyond EOD, truncated [ 95.359645][ T5208] loop2: p70 start 4294967295 is beyond EOD, truncated [ 95.367041][ T5208] loop2: p71 start 4294967295 is beyond EOD, truncated [ 95.374009][ T5208] loop2: p72 start 4294967295 is beyond EOD, truncated [ 95.380893][ T5208] loop2: p73 start 4294967295 is beyond EOD, truncated [ 95.387884][ T5208] loop2: p74 start 4294967295 is beyond EOD, truncated [ 95.394858][ T5208] loop2: p75 start 4294967295 is beyond EOD, truncated [ 95.401801][ T5208] loop2: p76 start 4294967295 is beyond EOD, truncated [ 95.408687][ T5208] loop2: p77 start 4294967295 is beyond EOD, truncated [ 95.415694][ T5208] loop2: p78 start 4294967295 is beyond EOD, truncated [ 95.422712][ T5208] loop2: p79 start 4294967295 is beyond EOD, truncated [ 95.430898][ T5208] loop2: p80 start 4294967295 is beyond EOD, truncated [ 95.438130][ T5208] loop2: p81 start 4294967295 is beyond EOD, truncated [ 95.445261][ T5208] loop2: p82 start 4294967295 is beyond EOD, truncated [ 95.452265][ T5208] loop2: p83 start 4294967295 is beyond EOD, truncated [ 95.459159][ T5208] loop2: p84 start 4294967295 is beyond EOD, truncated [ 95.466155][ T5208] loop2: p85 start 4294967295 is beyond EOD, truncated [ 95.473244][ T5208] loop2: p86 start 4294967295 is beyond EOD, truncated [ 95.480122][ T5208] loop2: p87 start 4294967295 is beyond EOD, truncated [ 95.487066][ T5208] loop2: p88 start 4294967295 is beyond EOD, truncated [ 95.487963][ T5838] ocfs2: Unmounting device (7,3) on (node local) [ 95.494040][ T5208] loop2: p89 start 4294967295 is beyond EOD, truncated [ 95.494079][ T5208] loop2: p90 start 4294967295 is beyond EOD, truncated [ 95.494113][ T5208] loop2: p91 start 4294967295 is beyond EOD, truncated [ 95.494148][ T5208] loop2: p92 start 4294967295 is beyond EOD, truncated [ 95.494182][ T5208] loop2: p93 start 4294967295 is beyond EOD, truncated [ 95.494214][ T5208] loop2: p94 start 4294967295 is beyond EOD, truncated [ 95.543551][ T5208] loop2: p95 start 4294967295 is beyond EOD, truncated [ 95.550448][ T5208] loop2: p96 start 4294967295 is beyond EOD, truncated [ 95.557481][ T5208] loop2: p97 start 4294967295 is beyond EOD, truncated [ 95.564543][ T5208] loop2: p98 start 4294967295 is beyond EOD, truncated [ 95.571558][ T5208] loop2: p99 start 4294967295 is beyond EOD, truncated [ 95.578461][ T5208] loop2: p100 start 4294967295 is beyond EOD, truncated [ 95.585539][ T5208] loop2: p101 start 4294967295 is beyond EOD, truncated [ 95.592911][ T5208] loop2: p102 start 4294967295 is beyond EOD, truncated [ 95.599890][ T5208] loop2: p103 start 4294967295 is beyond EOD, truncated [ 95.606951][ T5208] loop2: p104 start 4294967295 is beyond EOD, truncated [ 95.614006][ T5208] loop2: p105 start 4294967295 is beyond EOD, truncated [ 95.620972][ T5208] loop2: p106 start 4294967295 is beyond EOD, truncated [ 95.628075][ T5208] loop2: p107 start 4294967295 is beyond EOD, truncated [ 95.635827][ T5208] loop2: p108 start 4294967295 is beyond EOD, truncated [ 95.643521][ T5208] loop2: p109 start 4294967295 is beyond EOD, truncated [ 95.650497][ T5208] loop2: p110 start 4294967295 is beyond EOD, truncated [ 95.657565][ T5208] loop2: p111 start 4294967295 is beyond EOD, truncated [ 95.664581][ T5208] loop2: p112 start 4294967295 is beyond EOD, truncated [ 95.671680][ T5208] loop2: p113 start 4294967295 is beyond EOD, truncated [ 95.678648][ T5208] loop2: p114 start 4294967295 is beyond EOD, truncated [ 95.685728][ T5208] loop2: p115 start 4294967295 is beyond EOD, truncated [ 95.692798][ T5208] loop2: p116 start 4294967295 is beyond EOD, truncated [ 95.699773][ T5208] loop2: p117 start 4294967295 is beyond EOD, truncated [ 95.706857][ T5208] loop2: p118 start 4294967295 is beyond EOD, truncated [ 95.713936][ T5208] loop2: p119 start 4294967295 is beyond EOD, truncated [ 95.720914][ T5208] loop2: p120 start 4294967295 is beyond EOD, truncated [ 95.727962][ T5208] loop2: p121 start 4294967295 is beyond EOD, truncated [ 95.735631][ T5208] loop2: p122 start 4294967295 is beyond EOD, truncated [ 95.743216][ T5208] loop2: p123 start 4294967295 is beyond EOD, truncated [ 95.750201][ T5208] loop2: p124 start 4294967295 is beyond EOD, truncated [ 95.757257][ T5208] loop2: p125 start 4294967295 is beyond EOD, truncated [ 95.764319][ T5208] loop2: p126 start 4294967295 is beyond EOD, truncated [ 95.771299][ T5208] loop2: p127 start 4294967295 is beyond EOD, truncated [ 95.778375][ T5208] loop2: p128 start 4294967295 is beyond EOD, truncated [ 95.780155][ T6225] loop0: detected capacity change from 0 to 32768 [ 95.785403][ T5208] loop2: p129 start 4294967295 is beyond EOD, truncated [ 95.798902][ T5208] loop2: p130 start 4294967295 is beyond EOD, truncated [ 95.805970][ T5208] loop2: p131 start 4294967295 is beyond EOD, truncated [ 95.813024][ T5208] loop2: p132 start 4294967295 is beyond EOD, truncated [ 95.819989][ T5208] loop2: p133 start 4294967295 is beyond EOD, truncated [ 95.827077][ T5208] loop2: p134 start 4294967295 is beyond EOD, truncated [ 95.834332][ T5208] loop2: p135 start 4294967295 is beyond EOD, truncated [ 95.841982][ T5208] loop2: p136 start 4294967295 is beyond EOD, truncated [ 95.848960][ T5208] loop2: p137 start 4294967295 is beyond EOD, truncated [ 95.856633][ T5208] loop2: p138 start 4294967295 is beyond EOD, truncated [ 95.863766][ T5208] loop2: p139 start 4294967295 is beyond EOD, truncated [ 95.870740][ T5208] loop2: p140 start 4294967295 is beyond EOD, truncated [ 95.877765][ T5208] loop2: p141 start 4294967295 is beyond EOD, truncated [ 95.884830][ T5208] loop2: p142 start 4294967295 is beyond EOD, truncated [ 95.891876][ T5208] loop2: p143 start 4294967295 is beyond EOD, truncated [ 95.898932][ T5208] loop2: p144 start 4294967295 is beyond EOD, truncated [ 95.906020][ T5208] loop2: p145 start 4294967295 is beyond EOD, truncated [ 95.913238][ T5208] loop2: p146 start 4294967295 is beyond EOD, truncated [ 95.917099][ T6238] loop1: detected capacity change from 0 to 512 [ 95.920280][ T5208] loop2: p147 start 4294967295 is beyond EOD, truncated [ 95.933866][ T5208] loop2: p148 start 4294967295 is beyond EOD, truncated [ 95.937472][ T6238] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.941563][ T5208] loop2: p149 start 4294967295 is beyond EOD, truncated [ 95.959525][ T5208] loop2: p150 start 4294967295 is beyond EOD, truncated [ 95.964487][ T6238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 95.966621][ T5208] loop2: p151 start 4294967295 is beyond EOD, truncated [ 95.981693][ T5208] loop2: p152 start 4294967295 is beyond EOD, truncated [ 95.988703][ T5208] loop2: p153 start 4294967295 is beyond EOD, truncated [ 95.997446][ T5208] loop2: p154 start 4294967295 is beyond EOD, truncated [ 96.005130][ T5208] loop2: p155 start 4294967295 is beyond EOD, truncated [ 96.012301][ T5208] loop2: p156 start 4294967295 is beyond EOD, truncated [ 96.019283][ T5208] loop2: p157 start 4294967295 is beyond EOD, truncated [ 96.026336][ T5208] loop2: p158 start 4294967295 is beyond EOD, truncated [ 96.033406][ T5208] loop2: p159 start 4294967295 is beyond EOD, truncated [ 96.040386][ T5208] loop2: p160 start 4294967295 is beyond EOD, truncated [ 96.048079][ T5208] loop2: p161 start 4294967295 is beyond EOD, truncated [ 96.055770][ T5208] loop2: p162 start 4294967295 is beyond EOD, truncated [ 96.062807][ T5208] loop2: p163 start 4294967295 is beyond EOD, truncated [ 96.069959][ T5208] loop2: p164 start 4294967295 is beyond EOD, truncated [ 96.077292][ T5208] loop2: p165 start 4294967295 is beyond EOD, truncated [ 96.084748][ T5208] loop2: p166 start 4294967295 is beyond EOD, truncated [ 96.091974][ T5208] loop2: p167 start 4294967295 is beyond EOD, truncated [ 96.098964][ T5208] loop2: p168 start 4294967295 is beyond EOD, truncated [ 96.106041][ T5208] loop2: p169 start 4294967295 is beyond EOD, truncated [ 96.113119][ T5208] loop2: p170 start 4294967295 is beyond EOD, truncated [ 96.120091][ T5208] loop2: p171 start 4294967295 is beyond EOD, truncated [ 96.127146][ T5208] loop2: p172 start 4294967295 is beyond EOD, truncated [ 96.134197][ T5208] loop2: p173 start 4294967295 is beyond EOD, truncated [ 96.141173][ T5208] loop2: p174 start 4294967295 is beyond EOD, truncated [ 96.148920][ T5208] loop2: p175 start 4294967295 is beyond EOD, truncated [ 96.156626][ T5208] loop2: p176 start 4294967295 is beyond EOD, truncated [ 96.163791][ T5208] loop2: p177 start 4294967295 is beyond EOD, truncated [ 96.170772][ T5208] loop2: p178 start 4294967295 is beyond EOD, truncated [ 96.177857][ T5208] loop2: p179 start 4294967295 is beyond EOD, truncated [ 96.184917][ T5208] loop2: p180 start 4294967295 is beyond EOD, truncated [ 96.191973][ T5208] loop2: p181 start 4294967295 is beyond EOD, truncated [ 96.198999][ T5208] loop2: p182 start 4294967295 is beyond EOD, truncated [ 96.206079][ T5208] loop2: p183 start 4294967295 is beyond EOD, truncated [ 96.213110][ T5208] loop2: p184 start 4294967295 is beyond EOD, truncated [ 96.220081][ T5208] loop2: p185 start 4294967295 is beyond EOD, truncated [ 96.227187][ T5208] loop2: p186 start 4294967295 is beyond EOD, truncated [ 96.232002][ T6238] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.234262][ T5208] loop2: p187 start 4294967295 is beyond EOD, truncated [ 96.248357][ T5208] loop2: p188 start 4294967295 is beyond EOD, truncated [ 96.257915][ T5208] loop2: p189 start 4294967295 is beyond EOD, truncated [ 96.265057][ T5208] loop2: p190 start 4294967295 is beyond EOD, truncated [ 96.272084][ T5208] loop2: p191 start 4294967295 is beyond EOD, truncated [ 96.275459][ T6238] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.106: bg 0: block 361: padding at end of block bitmap is not set [ 96.279025][ T5208] loop2: p192 start 4294967295 is beyond EOD, truncated [ 96.279056][ T5208] loop2: p193 start 4294967295 is beyond EOD, truncated [ 96.307415][ T5208] loop2: p194 start 4294967295 is beyond EOD, truncated [ 96.314512][ T5208] loop2: p195 start 4294967295 is beyond EOD, truncated [ 96.321565][ T5208] loop2: p196 start 4294967295 is beyond EOD, truncated [ 96.328546][ T5208] loop2: p197 start 4294967295 is beyond EOD, truncated [ 96.335642][ T5208] loop2: p198 start 4294967295 is beyond EOD, truncated [ 96.342687][ T5208] loop2: p199 start 4294967295 is beyond EOD, truncated [ 96.351176][ T5208] loop2: p200 start 4294967295 is beyond EOD, truncated [ 96.358302][ T5208] loop2: p201 start 4294967295 is beyond EOD, truncated [ 96.358356][ T6238] EXT4-fs (loop1): Remounting filesystem read-only [ 96.365321][ T5208] loop2: p202 start 4294967295 is beyond EOD, truncated [ 96.365358][ T5208] loop2: p203 start 4294967295 is beyond EOD, truncated [ 96.365390][ T5208] loop2: p204 start 4294967295 is beyond EOD, truncated [ 96.365426][ T5208] loop2: p205 start 4294967295 is beyond EOD, truncated [ 96.365461][ T5208] loop2: p206 start 4294967295 is beyond EOD, truncated [ 96.365495][ T5208] loop2: p207 start 4294967295 is beyond EOD, truncated [ 96.365529][ T5208] loop2: p208 start 4294967295 is beyond EOD, truncated [ 96.365565][ T5208] loop2: p209 start 4294967295 is beyond EOD, truncated [ 96.365595][ T5208] loop2: p210 start 4294967295 is beyond EOD, truncated [ 96.434413][ T6238] EXT4-fs (loop1): 1 truncate cleaned up [ 96.435118][ T5208] loop2: p211 start 4294967295 is beyond EOD, truncated [ 96.447743][ T5208] loop2: p212 start 4294967295 is beyond EOD, truncated [ 96.455391][ T5208] loop2: p213 start 4294967295 is beyond EOD, truncated [ 96.463030][ T5208] loop2: p214 start 4294967295 is beyond EOD, truncated [ 96.470028][ T5208] loop2: p215 start 4294967295 is beyond EOD, truncated [ 96.474706][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 96.477134][ T5208] loop2: p216 start 4294967295 is beyond EOD, truncated [ 96.495988][ T5208] loop2: p217 start 4294967295 is beyond EOD, truncated [ 96.502996][ T5208] loop2: p218 start 4294967295 is beyond EOD, truncated [ 96.509967][ T5208] loop2: p219 start 4294967295 is beyond EOD, truncated [ 96.517032][ T5208] loop2: p220 start 4294967295 is beyond EOD, truncated [ 96.524039][ T5208] loop2: p221 start 4294967295 is beyond EOD, truncated [ 96.531006][ T5208] loop2: p222 start 4294967295 is beyond EOD, truncated [ 96.538112][ T5208] loop2: p223 start 4294967295 is beyond EOD, truncated [ 96.545146][ T5208] loop2: p224 start 4294967295 is beyond EOD, truncated [ 96.552382][ T5208] loop2: p225 start 4294967295 is beyond EOD, truncated [ 96.560939][ T5208] loop2: p226 start 4294967295 is beyond EOD, truncated [ 96.568004][ T5208] loop2: p227 start 4294967295 is beyond EOD, truncated [ 96.575092][ T5208] loop2: p228 start 4294967295 is beyond EOD, truncated [ 96.582169][ T5208] loop2: p229 start 4294967295 is beyond EOD, truncated [ 96.589145][ T5208] loop2: p230 start 4294967295 is beyond EOD, truncated [ 96.596227][ T5208] loop2: p231 start 4294967295 is beyond EOD, truncated [ 96.603344][ T5208] loop2: p232 start 4294967295 is beyond EOD, truncated [ 96.610318][ T5208] loop2: p233 start 4294967295 is beyond EOD, truncated [ 96.617373][ T5208] loop2: p234 start 4294967295 is beyond EOD, truncated [ 96.624403][ T5208] loop2: p235 start 4294967295 is beyond EOD, truncated [ 96.634957][ T5208] loop2: p236 start 4294967295 is beyond EOD, truncated [ 96.643746][ T5208] loop2: p237 start 4294967295 is beyond EOD, truncated [ 96.650724][ T5208] loop2: p238 start 4294967295 is beyond EOD, truncated [ 96.658687][ T5208] loop2: p239 start 4294967295 is beyond EOD, truncated [ 96.666342][ T5208] loop2: p240 start 4294967295 is beyond EOD, truncated [ 96.673394][ T5208] loop2: p241 start 4294967295 is beyond EOD, truncated [ 96.680362][ T5208] loop2: p242 start 4294967295 is beyond EOD, truncated [ 96.687412][ T5208] loop2: p243 start 4294967295 is beyond EOD, truncated [ 96.694442][ T5208] loop2: p244 start 4294967295 is beyond EOD, truncated [ 96.701477][ T5208] loop2: p245 start 4294967295 is beyond EOD, truncated [ 96.708455][ T5208] loop2: p246 start 4294967295 is beyond EOD, truncated [ 96.715631][ T5208] loop2: p247 start 4294967295 is beyond EOD, truncated [ 96.722696][ T5208] loop2: p248 start 4294967295 is beyond EOD, truncated [ 96.729674][ T5208] loop2: p249 start 4294967295 is beyond EOD, truncated [ 96.736734][ T5208] loop2: p250 start 4294967295 is beyond EOD, truncated [ 96.743843][ T5208] loop2: p251 start 4294967295 is beyond EOD, truncated [ 96.750874][ T5208] loop2: p252 start 4294967295 is beyond EOD, truncated [ 96.757935][ T5208] loop2: p253 start 4294967295 is beyond EOD, truncated [ 96.765647][ T5208] loop2: p254 start 4294967295 is beyond EOD, truncated [ 96.773445][ T5208] loop2: p255 start 4294967295 is beyond EOD, truncated [ 96.818173][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 97.419367][ T6159] udevd[6159]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.436504][ T6129] udevd[6129]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 97.491653][ T6268] loop1: detected capacity change from 0 to 1024 [ 97.585356][ T29] audit: type=1800 audit(1730928947.495:4): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.118" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 97.796143][ T6282] loop0: detected capacity change from 0 to 1764 [ 97.862081][ T2988] hfsplus: b-tree write err: -5, ino 4 [ 97.979234][ T6250] loop3: detected capacity change from 0 to 32768 [ 98.375830][ T6250] JBD2: Ignoring recovery information on journal [ 98.697351][ T6300] loop0: detected capacity change from 0 to 2048 [ 98.767336][ T6302] loop0: detected capacity change from 0 to 256 [ 98.799724][ T6250] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.848270][ T6291] loop1: detected capacity change from 0 to 32768 [ 98.892376][ T6291] XFS: attr2 mount option is deprecated. [ 98.920088][ T6286] loop5: detected capacity change from 0 to 32768 [ 98.938760][ T6286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.123 (6286) [ 98.963323][ T6302] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 98.989727][ T6291] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.136784][ T5838] ocfs2: Unmounting device (7,3) on (node local) [ 99.266422][ T6291] XFS (loop1): Ending clean mount [ 99.280547][ T6297] loop4: detected capacity change from 0 to 40427 [ 99.288682][ T6297] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 99.299733][ T6297] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.308430][ T6286] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.323421][ T6286] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 99.332408][ T6297] F2FS-fs (loop4): build fault injection attr: rate: 27486, type: 0x1fffff [ 99.344218][ T6286] BTRFS info (device loop5): using free-space-tree [ 99.423812][ T6276] loop2: detected capacity change from 0 to 32768 [ 99.437773][ T6291] XFS (loop1): Quotacheck needed: Please wait. [ 99.444700][ T6297] F2FS-fs (loop4): invalid crc value [ 99.641140][ T6297] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.643291][ T6276] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 99.657814][ T6276] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.754453][ T6276] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 99.770915][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.778133][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.872753][ T6291] XFS (loop1): Quotacheck: Done. [ 99.949434][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 171ms [ 99.958988][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.968058][ T6276] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 100.020942][ T6297] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 100.050255][ T6297] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 100.264840][ T6345] loop3: detected capacity change from 0 to 256 [ 100.273573][ T5841] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.399302][ T5844] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.408305][ T6345] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 100.634476][ T6348] loop0: detected capacity change from 0 to 2048 [ 100.702380][ T6348] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 100.743228][ T6348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.861712][ T963] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.865340][ T6354] smc: net device bond0 applied user defined pnetid SYZ0 [ 101.061464][ T963] usb 4-1: Using ep0 maxpacket: 32 [ 101.111885][ T963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 101.121074][ T963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.151432][ T963] usb 4-1: Product: syz [ 101.155650][ T963] usb 4-1: Manufacturer: syz [ 101.215730][ T963] usb 4-1: SerialNumber: syz [ 101.254820][ T963] usb 4-1: config 0 descriptor?? [ 101.500256][ T963] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 101.533651][ T963] eb 9a 3b 80 9b e4 7a f0 [ 101.538294][ T963] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 101.625793][ T6373] loop2: detected capacity change from 0 to 1024 [ 101.635161][ T29] audit: type=1326 audit(1730928951.555:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 101.740079][ T963] usb 4-1: USB disconnect, device number 3 [ 101.761456][ T29] audit: type=1326 audit(1730928951.585:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 101.836315][ T6381] loop4: detected capacity change from 0 to 1024 [ 101.849962][ T36] hfsplus: b-tree write err: -5, ino 4 [ 101.864167][ T29] audit: type=1326 audit(1730928951.595:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 101.917634][ T6381] hfsplus: bad catalog entry type [ 101.940434][ T29] audit: type=1326 audit(1730928951.595:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 101.988728][ T29] audit: type=1326 audit(1730928951.595:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 102.065914][ T29] audit: type=1326 audit(1730928951.595:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 102.090474][ T5949] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.091029][ T36] hfsplus: b-tree write err: -5, ino 4 [ 102.117107][ T29] audit: type=1326 audit(1730928951.595:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 102.216120][ T29] audit: type=1326 audit(1730928951.595:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207777e719 code=0x7ffc0000 [ 102.230786][ T6391] loop2: detected capacity change from 0 to 256 [ 102.261708][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 102.293721][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.316132][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.329009][ T6391] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.344084][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.405073][ T5949] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.432008][ T963] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.439807][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.478228][ T5949] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.512534][ T5949] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.520769][ T5949] usb 1-1: Manufacturer: syz [ 102.552381][ T5949] usb 1-1: config 0 descriptor?? [ 102.621946][ T963] usb 2-1: Using ep0 maxpacket: 8 [ 102.710095][ T963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.720125][ T963] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 102.729392][ T963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.740778][ T963] usb 2-1: config 0 descriptor?? [ 102.912091][ T5949] rc_core: IR keymap rc-hauppauge not found [ 102.918433][ T5949] Registered IR keymap rc-empty [ 102.941061][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.957092][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.011708][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.043796][ T5949] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 103.087918][ T5949] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 103.144701][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.155544][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.188275][ T963] kye 0003:0458:5014.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 103.196682][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.200836][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.223171][ T963] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 103.236088][ T5911] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 103.248899][ T963] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 103.266325][ T963] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 103.266377][ T963] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 103.266404][ T963] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 103.281619][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.281682][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.282416][ T963] kye 0003:0458:5014.0003: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 103.282454][ T963] kye 0003:0458:5014.0003: tablet-enabling feature report not found [ 103.282504][ T963] kye 0003:0458:5014.0003: tablet enabling failed [ 103.301526][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.309002][ T5911] usb 4-1: config 0 descriptor?? [ 103.321945][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.432772][ T963] usb 2-1: USB disconnect, device number 2 [ 103.515387][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.531607][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.551605][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.578188][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.602141][ T5949] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.625573][ T5949] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 103.625610][ T5949] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 103.637330][ T5949] usb 1-1: USB disconnect, device number 3 [ 103.754883][ T6398] loop4: detected capacity change from 0 to 32768 [ 103.763344][ T5911] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 103.860411][ T6398] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.918389][ T5911] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 103.958492][ T5911] usb 4-1: USB disconnect, device number 4 [ 104.078777][ T6398] XFS (loop4): Ending clean mount [ 104.092300][ T6398] XFS (loop4): Quotacheck needed: Please wait. [ 104.152575][ T6407] loop2: detected capacity change from 0 to 32768 [ 104.205816][ T6398] XFS (loop4): Quotacheck: Done. [ 104.221591][ T6407] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 104.278733][ T29] audit: type=1326 audit(1730928954.185:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.5.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f207777e719 code=0x0 [ 104.439017][ T6407] XFS (loop2): Ending clean mount [ 104.469415][ T6407] XFS (loop2): Quotacheck needed: Please wait. [ 104.489640][ T6432] loop0: detected capacity change from 0 to 4096 [ 104.528035][ T5840] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.564045][ T6432] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 104.592752][ T6407] XFS (loop2): Quotacheck: Done. [ 104.661881][ T6435] loop1: detected capacity change from 0 to 32768 [ 104.752977][ T5839] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 104.780100][ T6435] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.986589][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.094346][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.151937][ T6435] XFS (loop1): Ending clean mount [ 105.179892][ T6435] XFS (loop1): Quotacheck needed: Please wait. [ 105.332238][ T6435] XFS (loop1): Quotacheck: Done. [ 105.494679][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.501948][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.551459][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.573494][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.581017][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.602173][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.888026][ T6459] loop2: detected capacity change from 0 to 32768 [ 106.121498][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 106.155094][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.201208][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.237351][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.312265][ T25] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 106.361423][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.387101][ T25] usb 1-1: config 0 descriptor?? [ 106.412961][ T6474] netlink: 'syz.3.187': attribute type 6 has an invalid length. [ 106.432654][ T6475] loop4: detected capacity change from 0 to 24 [ 106.447089][ T6474] netlink: 'syz.3.187': attribute type 7 has an invalid length. [ 106.471879][ T6474] netlink: 'syz.3.187': attribute type 8 has an invalid length. [ 106.848226][ T25] sunplus 0003:04FC:05D8.0005: item fetching failed at offset 5/7 [ 106.879463][ T6487] loop5: detected capacity change from 0 to 16 [ 106.897720][ T25] sunplus 0003:04FC:05D8.0005: probe with driver sunplus failed with error -22 [ 106.907772][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 107.009134][ T6492] netlink: 4412 bytes leftover after parsing attributes in process `syz.3.195'. [ 107.149283][ T6487] erofs: (device loop5): mounted with root inode @ nid 36. [ 107.171970][ T25] usb 1-1: USB disconnect, device number 4 [ 107.293562][ T6491] loop4: detected capacity change from 0 to 40427 [ 107.345896][ T6497] loop1: detected capacity change from 0 to 1024 [ 107.368889][ T6491] F2FS-fs (loop4): invalid crc value [ 107.434042][ T6491] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.559967][ T6504] loop1: detected capacity change from 0 to 1024 [ 107.581460][ T5911] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.670396][ T6491] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.753864][ T6491] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 107.761806][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 107.769627][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.820063][ T5911] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 107.836474][ T6504] EXT4-fs: Ignoring removed orlov option [ 107.869896][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.878931][ T6504] EXT4-fs (loop1): Test dummy encryption mode enabled [ 107.905692][ T6504] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 107.922072][ T5911] usb 3-1: config 0 descriptor?? [ 107.969409][ T6520] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 107.996436][ T6504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.017659][ T6523] capability: warning: `syz.5.204' uses 32-bit capabilities (legacy support in use) [ 108.257176][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.365316][ T6531] loop4: detected capacity change from 0 to 16 [ 108.456764][ T6531] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.511899][ T5911] hid-alps 0003:044E:121E.0006: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0 [ 108.610278][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 108.762901][ T5909] usb 3-1: USB disconnect, device number 2 [ 108.848562][ T6544] loop3: detected capacity change from 0 to 4096 [ 109.193868][ T5911] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 109.220837][ T5911] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 109.327681][ T6564] program syz.5.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.490614][ T6567] [U] [ 109.833890][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.234'. [ 109.872013][ T6592] netlink: 256 bytes leftover after parsing attributes in process `syz.3.235'. [ 109.906686][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.234'. [ 109.918315][ T6592] unsupported nlmsg_type 40 [ 109.941631][ T6595] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 109.977755][ T6595] ALSA: mixer_oss: invalid OSS volume 'ԩ6~f`{XSԒj?)]0\' [ 110.030591][ T6595] ALSA: mixer_oss: invalid OSS volume ']qM3T=\S12$*' [ 110.064380][ T6595] ALSA: mixer_oss: invalid OSS volume ' ;*7 c+PqgU' [ 110.105608][ T6595] ALSA: mixer_oss: invalid OSS volume 'hv9gO= RpрH[t77' [ 110.435800][ T6611] loop5: detected capacity change from 0 to 4096 [ 110.523975][ T6625] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.580081][ T6627] loop4: detected capacity change from 0 to 64 [ 110.703896][ T6633] loop1: detected capacity change from 0 to 128 [ 110.716436][ T6611] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 110.839326][ T6635] loop3: detected capacity change from 0 to 1024 [ 110.888708][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 110.917561][ T6637] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 110.926313][ T6635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.954121][ T6637] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 111.232076][ T6650] hugetlbfs: Bad value 'g' for mount option 'size' [ 111.232076][ T6650] [ 111.328482][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.437302][ T6656] loop1: detected capacity change from 0 to 512 [ 111.467363][ T6656] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.506003][ T6656] EXT4-fs: Ignoring removed i_version option [ 111.565051][ T6656] EXT4-fs error (device loop1): __ext4_iget:4952: inode #11: block 1: comm syz.1.260: invalid block [ 111.585136][ T6656] EXT4-fs (loop1): Remounting filesystem read-only [ 111.646540][ T6656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.827947][ T6669] loop0: detected capacity change from 0 to 256 [ 111.901218][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.933797][ T6673] loop2: detected capacity change from 0 to 512 [ 112.158138][ T963] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 112.164501][ T6673] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.265: invalid indirect mapped block 256 (level 2) [ 112.250240][ T6669] FAT-fs (loop0): Directory bread(block 64) failed [ 112.261509][ T6669] FAT-fs (loop0): Directory bread(block 65) failed [ 112.274745][ T6673] EXT4-fs (loop2): 2 truncates cleaned up [ 112.279791][ T6669] FAT-fs (loop0): Directory bread(block 66) failed [ 112.298733][ T6673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.361604][ T963] usb 6-1: Using ep0 maxpacket: 32 [ 112.373446][ T963] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.380931][ T6644] loop4: detected capacity change from 0 to 40427 [ 112.384954][ T6669] FAT-fs (loop0): Directory bread(block 67) failed [ 112.395038][ T6644] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 112.403631][ T6644] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.423120][ T6669] FAT-fs (loop0): Directory bread(block 68) failed [ 112.465667][ T963] usb 6-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0x9D, changing to 0x8D [ 112.465889][ T6669] FAT-fs (loop0): Directory bread(block 69) failed [ 112.484558][ T6669] FAT-fs (loop0): Directory bread(block 70) failed [ 112.491154][ T6669] FAT-fs (loop0): Directory bread(block 71) failed [ 112.497996][ T6669] FAT-fs (loop0): Directory bread(block 72) failed [ 112.501180][ T963] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x8D has invalid wMaxPacketSize 0 [ 112.504594][ T6669] FAT-fs (loop0): Directory bread(block 73) failed [ 112.532822][ T6665] loop3: detected capacity change from 0 to 40427 [ 112.539413][ T963] usb 6-1: config 0 interface 0 altsetting 16 bulk endpoint 0x8D has invalid maxpacket 0 [ 112.551113][ T963] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 112.564786][ T963] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.571623][ T963] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 7.00 [ 112.580700][ T963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.592709][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.607337][ T6665] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 112.638176][ T6682] loop1: detected capacity change from 0 to 256 [ 112.642812][ T6665] F2FS-fs (loop3): Image doesn't support compression [ 112.648208][ T6644] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.660049][ T6665] F2FS-fs (loop3): heap/no_heap options were deprecated [ 112.673370][ T963] usb 6-1: config 0 descriptor?? [ 112.716384][ T6665] F2FS-fs (loop3): Image doesn't support compression [ 112.751156][ T6665] F2FS-fs (loop3): invalid crc value [ 112.800889][ T6644] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.814184][ T6644] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.864966][ T6665] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.984977][ T6665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.153793][ T963] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 113.163131][ T963] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 113.170999][ T963] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 113.231125][ T963] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 113.289742][ T963] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 113.308008][ T963] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 113.344208][ T963] hid-thrustmaster 0003:044F:B65D.0008: setup data couldn't be sent [ 113.352490][ T5838] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4f6/0x1ca0 [ 113.352596][ T5838] F2FS-fs (loop3): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 113.358129][ T6697] loop0: detected capacity change from 0 to 1024 [ 113.387162][ C0] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71 [ 113.417261][ T6697] netlink: zone id is out of range [ 113.443806][ T6699] loop1: detected capacity change from 0 to 128 [ 113.452866][ T6699] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.465718][ T6699] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.474865][ T6697] netlink: zone id is out of range [ 113.474924][ T6697] netlink: zone id is out of range [ 113.474937][ T6697] netlink: zone id is out of range [ 113.474948][ T6697] netlink: zone id is out of range [ 113.474959][ T6697] netlink: zone id is out of range [ 113.474971][ T6697] netlink: zone id is out of range [ 113.474982][ T6697] netlink: zone id is out of range [ 113.474994][ T6697] netlink: zone id is out of range [ 113.475004][ T6697] netlink: zone id is out of range [ 113.551733][ T963] usb 6-1: USB disconnect, device number 4 [ 114.315986][ T6691] loop2: detected capacity change from 0 to 32768 [ 114.375662][ T6691] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.272 (6691) [ 114.413740][ T6718] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.498119][ T6709] loop3: detected capacity change from 0 to 32768 [ 114.582489][ T6691] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 114.620914][ T6724] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 114.637842][ T6691] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 114.711630][ T6691] BTRFS info (device loop2): using free-space-tree [ 114.785727][ T6709] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 114.863116][ T6741] loop5: detected capacity change from 0 to 16 [ 114.872608][ T6709] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 114.890340][ T6709] bcachefs (loop3): Version upgrade required: [ 114.890340][ T6709] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 114.890340][ T6709] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 114.890340][ T6709] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 115.013782][ T6741] erofs: (device loop5): mounted with root inode @ nid 36. [ 115.030776][ T6747] xt_socket: unknown flags 0x8 [ 115.079349][ T6709] bcachefs (loop3): dropping and reconstructing all alloc info [ 115.263837][ T6709] bcachefs (loop3): check_topology... done [ 115.269790][ T6709] bcachefs (loop3): accounting_read... done [ 115.338066][ T6709] bcachefs (loop3): alloc_read... done [ 115.393991][ T6709] bcachefs (loop3): stripes_read... done [ 115.418834][ T6751] loop0: detected capacity change from 0 to 32768 [ 115.441577][ T29] audit: type=1800 audit(1730928965.355:14): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.272" name="file0" dev="loop2" ino=258 res=0 errno=0 [ 115.457493][ T6709] bcachefs (loop3): snapshots_read... done [ 115.468495][ T6709] bcachefs (loop3): check_allocations... [ 115.481865][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.608120][ T6709] done [ 115.650569][ T6709] bcachefs (loop3): going read-write [ 115.672133][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 115.706452][ T6709] bcachefs (loop3): done starting filesystem [ 115.723056][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.785991][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.791894][ T6691] syz.2.272 (6691) used greatest stack depth: 17816 bytes left [ 115.851649][ T5910] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 115.860805][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.954941][ T5839] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 115.960022][ T5910] usb 5-1: config 0 descriptor?? [ 116.060924][ T5838] bcachefs (loop3): shutting down [ 116.090441][ T5838] bcachefs (loop3): going read-only [ 116.121798][ T5838] bcachefs (loop3): finished waiting for writes to stop [ 116.175401][ T5838] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 116.221716][ T5838] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 116.282221][ T5838] bcachefs (loop3): unshutdown complete, journal seq 11 [ 116.290948][ T5838] bcachefs (loop3): done going read-only, filesystem not clean [ 116.498396][ T5910] kone 0003:1E7D:2CED.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 116.534206][ T6780] loop5: detected capacity change from 0 to 64 [ 116.557514][ T5838] bcachefs (loop3): shutdown complete [ 116.568856][ T6778] loop0: detected capacity change from 0 to 4096 [ 116.597896][ T6782] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 116.597896][ T6782] SȘȞZ6' [ 116.630780][ T6778] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 116.656308][ T5910] kone 0003:1E7D:2CED.0009: couldn't init struct kone_device [ 116.696480][ T5910] kone 0003:1E7D:2CED.0009: couldn't install mouse [ 116.729102][ T5910] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -5 [ 116.814153][ T5910] usb 5-1: USB disconnect, device number 2 [ 116.903220][ T6778] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB [ 117.091091][ T29] audit: type=1400 audit(1730928967.005:15): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6787 comm="syz.2.306" [ 117.303660][ T6770] loop1: detected capacity change from 0 to 32768 [ 117.467872][ T6770] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.579068][ T6770] XFS (loop1): Ending clean mount [ 117.612390][ T6813] loop4: detected capacity change from 0 to 2048 [ 117.620028][ T6813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.709528][ T6815] loop5: detected capacity change from 0 to 1024 [ 117.719000][ T6815] EXT4-fs: Ignoring removed orlov option [ 117.731458][ T6815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.771519][ T5910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.793495][ T5841] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.848716][ T6813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.858027][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 117.865125][ T6815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.930202][ T6813] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.311: corrupted in-inode xattr: invalid ea_ino [ 117.980831][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.002451][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.035166][ T6813] EXT4-fs (loop4): Remounting filesystem read-only [ 118.041128][ T5910] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 118.064999][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.092123][ T5910] usb 3-1: config 0 descriptor?? [ 118.277736][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.319918][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.363999][ T6833] loop0: detected capacity change from 0 to 1024 [ 118.437091][ T6833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.498650][ T6837] loop5: detected capacity change from 0 to 256 [ 118.580666][ T5910] hid-led 0003:27B8:01ED.000A: item fetching failed at offset 1/5 [ 118.593456][ T5910] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -22 [ 118.616521][ T6837] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 118.744776][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.795012][ T963] usb 3-1: USB disconnect, device number 3 [ 118.905704][ T29] audit: type=1326 audit(1730928968.825:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 118.949472][ T29] audit: type=1326 audit(1730928968.825:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 119.082533][ T29] audit: type=1326 audit(1730928968.825:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 119.203948][ T29] audit: type=1326 audit(1730928968.825:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 119.212856][ T6851] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 119.308562][ T6851] macvtap1: entered promiscuous mode [ 119.310604][ T29] audit: type=1326 audit(1730928968.825:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 119.353817][ T6854] loop0: detected capacity change from 0 to 4096 [ 119.379158][ T29] audit: type=1326 audit(1730928968.825:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 119.411796][ T6854] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 119.432185][ T6851] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 119.447800][ T6856] loop5: detected capacity change from 0 to 1024 [ 119.521793][ T29] audit: type=1326 audit(1730928968.825:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 119.530820][ T6856] hfsplus: bad catalog entry type [ 119.610783][ T29] audit: type=1326 audit(1730928968.825:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b7e719 code=0x7ffc0000 [ 119.647227][ T6854] ntfs3(loop0): failed to convert "076c" to cp932 [ 119.792552][ T32] hfsplus: b-tree write err: -5, ino 4 [ 120.060501][ T6869] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 120.060501][ T6869] The task syz.4.335 (6869) triggered the difference, watch for misbehavior. [ 120.210836][ T6842] loop1: detected capacity change from 0 to 32768 [ 120.242124][ T6842] XFS: noikeep mount option is deprecated. [ 120.295878][ T6877] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 120.313906][ T6842] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 120.437202][ T6887] loop3: detected capacity change from 0 to 256 [ 120.444520][ T6887] exfat: Deprecated parameter 'utf8' [ 120.450056][ T6887] exfat: Deprecated parameter 'utf8' [ 120.538809][ T6887] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 120.561221][ T6842] XFS (loop1): Ending clean mount [ 120.579000][ T6842] XFS (loop1): Quotacheck needed: Please wait. [ 120.628505][ T6842] XFS (loop1): Quotacheck: Done. [ 120.787632][ T6897] loop0: detected capacity change from 0 to 1024 [ 120.808110][ T6897] EXT4-fs: Ignoring removed orlov option [ 120.831881][ T5841] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 120.851009][ T6897] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.887093][ T6897] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 121.030738][ T6897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.204330][ T6913] loop3: detected capacity change from 0 to 128 [ 121.206601][ T6911] loop2: detected capacity change from 0 to 64 [ 121.242269][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.286360][ T6917] loop5: detected capacity change from 0 to 1024 [ 121.297926][ T6915] loop4: detected capacity change from 0 to 256 [ 121.316033][ T6915] exfat: Deprecated parameter 'utf8' [ 121.321518][ T6915] exfat: Deprecated parameter 'utf8' [ 121.364044][ T6915] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 121.409871][ T36] hfsplus: b-tree write err: -5, ino 4 [ 121.433282][ T6919] net_ratelimit: 56 callbacks suppressed [ 121.433352][ T6919] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.815735][ T6921] loop5: detected capacity change from 0 to 40427 [ 121.867015][ T6921] F2FS-fs (loop5): heap/no_heap options were deprecated [ 121.898799][ T6921] F2FS-fs (loop5): invalid crc value [ 121.906503][ T6921] F2FS-fs (loop5): Found nat_bits in checkpoint [ 121.928590][ T6929] loop3: detected capacity change from 0 to 64 [ 122.148989][ T29] audit: type=1800 audit(1730928972.055:24): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.362" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 122.169392][ T6935] loop4: detected capacity change from 0 to 128 [ 122.320247][ T6935] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 122.425597][ T6921] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 122.434792][ T6935] syz.4.364: attempt to access beyond end of device [ 122.434792][ T6935] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 122.607984][ T6935] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 122.643420][ T5844] syz-executor: attempt to access beyond end of device [ 122.643420][ T5844] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.698409][ T5844] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 122.752640][ T6958] loop1: detected capacity change from 0 to 4096 [ 122.771483][ T6958] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 122.783339][ T6948] syz.4.364: attempt to access beyond end of device [ 122.783339][ T6948] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 122.798188][ T6948] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 122.887288][ T5840] sysv_free_block: flc_count > flc_size [ 122.897231][ T6958] ntfs3(loop1): failed to convert "c46c" to ascii [ 122.903105][ T5840] sysv_free_block: flc_count > flc_size [ 122.951572][ T5840] sysv_free_block: flc_count > flc_size [ 122.957202][ T5840] sysv_free_block: flc_count > flc_size [ 122.974672][ T5840] sysv_free_block: flc_count > flc_size [ 122.980291][ T5840] sysv_free_block: flc_count > flc_size [ 122.986281][ T5840] sysv_free_block: flc_count > flc_size [ 122.991928][ T5840] sysv_free_block: flc_count > flc_size [ 122.997504][ T5840] sysv_free_block: flc_count > flc_size [ 123.003268][ T5840] sysv_free_block: flc_count > flc_size [ 123.010791][ T5840] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 124.426659][ T6999] loop2: detected capacity change from 0 to 4096 [ 124.461732][ T6999] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 124.578577][ T6999] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 124.779068][ T6989] loop0: detected capacity change from 0 to 32768 [ 124.789859][ T7010] bond1: entered promiscuous mode [ 124.847882][ T5839] ntfs3(loop2): ino=1a, ntfs_sync_fs failed, -22. [ 124.881731][ T7010] bond1: entered allmulticast mode [ 124.882281][ T6989] ERROR: (device loop0): diWrite: ixpxd invalid [ 124.882281][ T6989] [ 124.911900][ T7010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.983315][ T6989] ERROR: (device loop0): remounting filesystem as read-only [ 124.990799][ T6989] ERROR: (device loop0): txCommit: [ 124.990799][ T6989] [ 125.152879][ T7021] loop3: detected capacity change from 0 to 1024 [ 125.190334][ T7021] hfsplus: bad catalog entry type [ 125.318165][ T11] hfsplus: b-tree write err: -5, ino 4 [ 125.436799][ T7026] loop4: detected capacity change from 0 to 256 [ 125.458016][ T7026] exfat: Deprecated parameter 'namecase' [ 125.544908][ T7026] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 125.752240][ T7032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.801099][ T7007] loop5: detected capacity change from 0 to 32768 [ 125.828888][ T7010] bond1 (unregistering): Released all slaves [ 125.838596][ T7007] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.395 (7007) [ 125.873653][ T7036] loop4: detected capacity change from 0 to 1024 [ 125.923384][ T7036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.961806][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.981897][ T7007] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.008537][ T5856] Bluetooth: hci5: command 0x0405 tx timeout [ 126.039154][ T7036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.041583][ T7007] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 126.067404][ T7007] BTRFS info (device loop5): using free-space-tree [ 126.141447][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 126.155787][ T5911] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 126.165061][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.188239][ T5911] usb 3-1: Product: syz [ 126.194363][ T5911] usb 3-1: Manufacturer: syz [ 126.199087][ T5911] usb 3-1: SerialNumber: syz [ 126.216258][ T5911] r8152-cfgselector 3-1: Unknown version 0x0000 [ 126.222900][ T5911] r8152-cfgselector 3-1: config 0 descriptor?? [ 126.548770][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.755434][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 126.771497][ T5911] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 127.114329][ T5844] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.259270][ T7094] netlink: 'syz.3.426': attribute type 4 has an invalid length. [ 127.275842][ T7094] netlink: 17 bytes leftover after parsing attributes in process `syz.3.426'. [ 127.416334][ T7096] loop1: detected capacity change from 0 to 512 [ 127.439413][ T7096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.525932][ T7096] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 127.559086][ T7096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 127.576780][ T7096] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 127.633251][ T7096] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 127.643394][ T7096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.740918][ T7096] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 127.773154][ T7110] loop2: detected capacity change from 0 to 16 [ 127.794037][ T7112] loop4: detected capacity change from 0 to 512 [ 127.915344][ T7110] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.949093][ T7112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.969695][ T7112] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.011555][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.094911][ T7112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.434: bg 0: block 128: padding at end of block bitmap is not set [ 128.375328][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.149971][ T7128] loop1: detected capacity change from 0 to 32768 [ 129.151927][ T5911] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.164266][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.246286][ T7128] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.335838][ T7168] loop3: detected capacity change from 0 to 2048 [ 129.342533][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 129.350002][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.363276][ T7128] XFS (loop1): Ending clean mount [ 129.384476][ T5911] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 129.395998][ T5911] usb 1-1: config 0 has no interface number 0 [ 129.403118][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.416385][ T5911] usb 1-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=de.4d [ 129.427349][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.442639][ T5910] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 129.468135][ T5911] usb 1-1: Product: syz [ 129.477584][ T7170] loop5: detected capacity change from 0 to 1024 [ 129.486583][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.495070][ T5911] usb 1-1: Manufacturer: syz [ 129.503948][ T7172] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.511776][ T5911] usb 1-1: SerialNumber: syz [ 129.535153][ T5910] usb 3-1: config 0 descriptor?? [ 129.565240][ T5911] usb 1-1: config 0 descriptor?? [ 129.610334][ T7170] hfsplus: bad catalog entry type [ 129.652474][ T7139] loop4: detected capacity change from 0 to 32768 [ 129.671022][ T5841] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.702025][ T62] hfsplus: b-tree write err: -5, ino 4 [ 129.746706][ T7139] [ 129.746706][ T7139] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.746706][ T7139] [ 129.778329][ T7139] non-latin1 character 0x3ff found in JFS file name [ 129.816997][ T7139] mount with iocharset=utf8 to access [ 129.822655][ T7139] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 129.822655][ T7139] [ 129.860514][ T5911] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state. [ 129.886725][ T7139] ERROR: (device loop4): remounting filesystem as read-only [ 129.953741][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 130.009418][ T5911] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 130.029210][ T5910] bigben 0003:146B:0902.000B: unexpected rdesc, please submit for review [ 130.058347][ T5911] usb 1-1: media controller created [ 130.077660][ T5910] bigben 0003:146B:0902.000B: collection stack underflow [ 130.089685][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.098793][ T5910] bigben 0003:146B:0902.000B: item 0 0 0 12 parsing failed [ 130.107199][ T5910] bigben 0003:146B:0902.000B: parse failed [ 130.161154][ T5910] bigben 0003:146B:0902.000B: probe with driver bigben failed with error -22 [ 130.261196][ T5910] usb 3-1: USB disconnect, device number 5 [ 130.288467][ T7176] loop5: detected capacity change from 0 to 40427 [ 130.378694][ T5911] DVB: Unable to find symbol dib8000_attach() [ 130.396179][ T5911] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 130.426779][ T7176] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 130.435435][ T7176] F2FS-fs (loop5): Image doesn't support compression [ 130.442360][ T7176] F2FS-fs (loop5): Image doesn't support compression [ 130.453815][ T7182] loop1: detected capacity change from 0 to 64 [ 130.454022][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 130.478844][ T7176] F2FS-fs (loop5): invalid crc value [ 130.488079][ T5911] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 130.497041][ T5911] usb 1-1: media controller created [ 130.504441][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.517752][ T7176] F2FS-fs (loop5): Found nat_bits in checkpoint [ 130.632314][ T5911] DVB: Unable to find symbol dib8000_attach() [ 130.638746][ T5911] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 130.678340][ T7176] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 130.752406][ T7176] syz.5.460: attempt to access beyond end of device [ 130.752406][ T7176] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.777058][ T29] audit: type=1800 audit(1730928980.665:25): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.460" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 130.781453][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 130.855597][ T5911] Registered IR keymap rc-empty [ 130.893088][ T5911] dvb-usb: could not initialize remote control. [ 130.914165][ T5911] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected. [ 131.040676][ T5844] syz-executor: attempt to access beyond end of device [ 131.040676][ T5844] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 131.058220][ T5844] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 131.142764][ T5910] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.189909][ T5909] usb 1-1: USB disconnect, device number 5 [ 131.218832][ T5909] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected. [ 131.311659][ T5846] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.369057][ T7199] mmap: syz.2.467 (7199) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.371467][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.401428][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.411232][ T5910] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 131.420386][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.471700][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 131.493819][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.523308][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.564460][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.602757][ T5910] usb 5-1: config 0 descriptor?? [ 131.610696][ T5846] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.643051][ T7188] loop1: detected capacity change from 0 to 32768 [ 131.654302][ T7188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.462 (7188) [ 131.669457][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.704978][ T7188] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.727700][ T5846] usb 4-1: config 0 descriptor?? [ 131.734756][ T7188] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 131.801672][ T7188] BTRFS info (device loop1): using free-space-tree [ 131.951636][ T7218] loop0: detected capacity change from 0 to 128 [ 132.094835][ T5910] redragon 0003:0C45:760B.000C: unknown main item tag 0x0 [ 132.102558][ T5910] redragon 0003:0C45:760B.000C: unknown main item tag 0x0 [ 132.111765][ T5910] redragon 0003:0C45:760B.000C: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 132.177352][ T5846] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 132.329910][ T5846] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input7 [ 132.391701][ T5909] usb 5-1: USB disconnect, device number 3 [ 132.436504][ T5841] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.476385][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.483991][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.542030][ T5846] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 132.564855][ T7231] loop5: detected capacity change from 0 to 2048 [ 132.628980][ T7231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.634371][ T5846] usb 4-1: USB disconnect, device number 5 [ 132.742919][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.970060][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 133.059109][ T5911] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 133.068127][ T5911] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 133.085476][ T5911] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 133.149167][ T5911] usb 3-1: config 250 has no interface number 0 [ 133.169492][ T5911] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 133.224414][ T5911] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 133.265661][ T5911] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.316987][ T5911] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.364653][ T7239] loop0: detected capacity change from 0 to 4096 [ 133.368939][ T5911] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 133.415146][ T5911] usb 3-1: config 250 interface 228 has no altsetting 0 [ 133.444990][ T7239] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 133.455912][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 133.480535][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 133.516683][ T5911] usb 3-1: Product: syz [ 133.533735][ T5911] usb 3-1: SerialNumber: syz [ 133.555447][ T7239] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 133.563048][ T5911] hub 3-1:250.228: bad descriptor, ignoring hub [ 133.563084][ T5911] hub 3-1:250.228: probe with driver hub failed with error -5 [ 133.653952][ T7254] loop5: detected capacity change from 0 to 16 [ 133.680237][ T7253] loop1: detected capacity change from 0 to 1024 [ 133.731865][ T7254] erofs: (device loop5): mounted with root inode @ nid 36. [ 133.781826][ T5911] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 133.898392][ T2988] hfsplus: b-tree write err: -5, ino 4 [ 134.059621][ T7244] loop4: detected capacity change from 0 to 32768 [ 134.070332][ T7244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.481 (7244) [ 134.105542][ T7244] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.139845][ T7262] loop0: detected capacity change from 0 to 1024 [ 134.147317][ T7244] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 134.156296][ T7244] BTRFS info (device loop4): using free-space-tree [ 134.201922][ T5846] usb 3-1: USB disconnect, device number 6 [ 134.221389][ T7262] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c02c, mo2=0003] [ 134.226088][ T5846] usblp0: removed [ 134.229544][ T7262] System zones: 0-1, 3-36 [ 134.398276][ T7262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.499820][ T7282] loop3: detected capacity change from 0 to 2048 [ 134.520040][ T7262] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.0.489: corrupted in-inode xattr: bad e_name length [ 134.534314][ T7282] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.574391][ T7244] BTRFS error (device loop4): balance: invalid convert metadata profile raid1c4 [ 134.684478][ T7282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.705915][ T5840] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.705927][ T7262] EXT4-fs (loop0): Remounting filesystem read-only [ 134.717789][ T7262] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 134.788541][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.793808][ T7282] netlink: 'syz.3.491': attribute type 8 has an invalid length. [ 134.949154][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.969839][ T7294] loop0: detected capacity change from 0 to 1764 [ 135.068458][ T7264] loop1: detected capacity change from 0 to 32768 [ 135.199451][ T7302] loop2: detected capacity change from 0 to 1024 [ 135.357447][ T7307] netlink: 'syz.5.501': attribute type 46 has an invalid length. [ 135.636248][ T7264] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.647692][ T2988] hfsplus: b-tree write err: -5, ino 4 [ 135.991830][ T7264] XFS (loop1): Ending clean mount [ 136.306659][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.334578][ T7341] loop3: detected capacity change from 0 to 4096 [ 136.369290][ T7341] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.424512][ T7341] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 136.442926][ T6159] udevd[6159]: incorrect nilfs2 checksum on /dev/loop3 [ 136.524499][ T7352] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.682504][ T7355] Invalid logical block size (768) [ 137.024630][ T7368] loop1: detected capacity change from 0 to 256 [ 137.081238][ T7368] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 137.172318][ T7371] loop3: detected capacity change from 0 to 1024 [ 137.374378][ T7373] loop5: detected capacity change from 0 to 2048 [ 137.402681][ T7373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.484060][ T2980] hfsplus: b-tree write err: -5, ino 4 [ 137.525069][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.666101][ T7349] loop4: detected capacity change from 0 to 32768 [ 137.794133][ T7349] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 138.001450][ T7400] program syz.3.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.029990][ T5840] ocfs2: Unmounting device (7,4) on (node local) [ 138.265309][ T7402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.339989][ T7406] loop1: detected capacity change from 0 to 512 [ 138.396730][ T7406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.440521][ T7406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.559448][ T7406] EXT4-fs (loop1): 1 truncate cleaned up [ 138.598194][ T7406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.821469][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.860256][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.946709][ T7432] loop1: detected capacity change from 0 to 8 [ 138.994597][ T7432] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 139.001621][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 139.013746][ T5911] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 139.041373][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.073674][ T5911] usb 4-1: Product: syz [ 139.080487][ T5911] usb 4-1: Manufacturer: syz [ 139.091441][ T5911] usb 4-1: SerialNumber: syz [ 139.113963][ T5911] usb 4-1: config 0 descriptor?? [ 139.300990][ T7441] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.310908][ T7441] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.319984][ T7441] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.329187][ T7441] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.565314][ T5911] airspy 4-1:0.0: Board ID: 00 [ 139.570205][ T5911] airspy 4-1:0.0: Firmware version: [ 139.771765][ T5911] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 139.818970][ T5911] airspy 4-1:0.0: Registered as swradio24 [ 139.826426][ T5911] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 139.852610][ T5911] usb 4-1: USB disconnect, device number 6 [ 140.212426][ T7465] loop4: detected capacity change from 0 to 1024 [ 140.325649][ T62] hfsplus: b-tree write err: -5, ino 4 [ 140.651208][ T7486] loop1: detected capacity change from 0 to 2048 [ 140.819468][ T5853] Bluetooth: hci0: command tx timeout [ 140.881408][ T7486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.910645][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 140.922257][ T7456] loop2: detected capacity change from 0 to 32768 [ 140.931660][ T7456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.565 (7456) [ 140.956714][ T7456] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.970019][ T7456] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 140.978842][ T7456] BTRFS info (device loop2): using free-space-tree [ 141.406641][ T7521] loop0: detected capacity change from 0 to 4096 [ 141.635488][ T7521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.591444][ C1] sched: DL replenish lagged too much [ 259.669656][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.691045][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.051267][ T5861] Bluetooth: hci0: command tx timeout [ 285.096592][ T5861] Bluetooth: hci1: command tx timeout [ 285.121929][ T5861] Bluetooth: hci2: command tx timeout [ 285.127393][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 285.153047][ T5861] Bluetooth: hci4: command tx timeout [ 299.097027][ T5861] Bluetooth: hci5: command 0x0405 tx timeout [ 299.223234][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.247305][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.325176][ T30] INFO: task kworker/1:6:5910 blocked for more than 146 seconds. [ 361.262652][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.293119][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 361.893312][ T30] Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 361.970927][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.041410][ T30] task:kworker/1:6 state:D stack:20016 pid:5910 tgid:5910 ppid:2 flags:0x00004000 [ 362.111401][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 362.118516][ T30] Call Trace: [ 362.174726][ T30] [ 362.177717][ T30] __schedule+0x184f/0x4c30 [ 362.241389][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.247094][ T30] ? try_to_wake_up+0x98b/0x14b0 [ 362.321441][ T30] ? schedule+0x90/0x320 [ 362.325764][ T30] ? __pfx___schedule+0x10/0x10 [ 362.330652][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.431416][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.436522][ T30] ? kick_pool+0x45c/0x620 [ 362.440980][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.531420][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.576287][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 362.601407][ T30] ? schedule+0x90/0x320 [ 362.605699][ T30] schedule+0x14b/0x320 [ 362.609885][ T30] schedule_preempt_disabled+0x13/0x30 [ 362.692151][ T30] __mutex_lock+0x6a7/0xd70 [ 362.696734][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.761425][ T30] ? __mutex_lock+0x52a/0xd70 [ 362.766181][ T30] ? reg_check_chans_work+0x164/0xfd0 [ 362.821435][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 362.826545][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.876539][ T30] reg_check_chans_work+0x164/0xfd0 [ 362.901378][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.907078][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 362.961426][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.967839][ T30] ? process_scheduled_works+0x976/0x1850 [ 363.021381][ T30] process_scheduled_works+0xa65/0x1850 [ 363.041440][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.047487][ T30] ? assign_work+0x364/0x3d0 [ 363.111379][ T30] worker_thread+0x870/0xd30 [ 363.116080][ T30] ? __kthread_parkme+0x169/0x1d0 [ 363.121149][ T30] ? __pfx_worker_thread+0x10/0x10 [ 363.181454][ T30] kthread+0x2f2/0x390 [ 363.185581][ T30] ? __pfx_worker_thread+0x10/0x10 [ 363.190731][ T30] ? __pfx_kthread+0x10/0x10 [ 363.251378][ T30] ret_from_fork+0x4d/0x80 [ 363.256052][ T30] ? __pfx_kthread+0x10/0x10 [ 363.260674][ T30] ret_from_fork_asm+0x1a/0x30 [ 363.301495][ T30] [ 363.304603][ T30] [ 363.304603][ T30] Showing all locks held in the system: [ 363.341431][ T30] 2 locks held by kworker/0:0H/10: [ 363.346585][ T30] #0: ffff888140ed2d48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 363.401385][ T30] #1: ffffc900000f7d00 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 363.431409][ T30] 3 locks held by kworker/u8:0/11: [ 363.436562][ T30] 1 lock held by ksoftirqd/1/24: [ 363.951844][ T30] 1 lock held by khungtaskd/30: [ 363.956746][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 364.111404][ T30] 3 locks held by kworker/u8:3/36: [ 364.116589][ T30] 5 locks held by kworker/u9:0/54: [ 364.231615][ T30] #0: ffff888031277148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 364.375869][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850